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(54) FAILURE DETECTION APPARATUS AND METHOD 

(57) In a controlled apparatus including at leat one 
detector and at least one actuator, when an actuator not 
operating normally is detected, detectors which may be 
in trouble are inspected through a failure detecting 
means of a controller. This controller includes input sig- 
nal storing means for storing the state of an input signal 
from the detector, auxiliary input signal storing means for 
storing the state of an input signal given from auxiliary 
signal generation means, logical operation means for 
generating an output signal to be applied to the abnormal 
actuator in accordance with a predetermined logic, and 
output signal storing means for storing the state of the 
output signal generated by the logical operation means. 
An identification code of an abnormal output signal cor- 
responding to the actuator not operating normally is des- 
ignated. The input signal which generates the abnormal 
output signal is designated, and affects the logical oper- 
ation of the logical operation means, is extracted. When 
the extracted input signal is the one stored in the input 
signal storing means, the identification code of this input 
signal is stored in the storing device. 
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Description 

Technical Field 

This invention relates to a fault detecting apparatus s 
and method. More particularly, the invention relates to 
an apparatus and method for detecting a location at 
which a failure is possible in one or both of a detector 
and actuator in a controlled system by investigating the 
internal states of a programmable logic controller (here- 
inafter referred to simply as a "PLC"). 

Background Art 

PLCs are used widely in the sequence control of a 
large variety of controlled systems. 

The controlled system is provided with many detec- 
tors (sensors and switches such as proximity switches, 
limit switches and photoelectric detectors) for extracting 
the operating state of the system, as well as a plurality 
of actuators (air cylinders, hydraulic cylinders, motors, 
etc.) for driving each component of the controlled sys- 
tem. 

The signals from the detectors are applied to a PLC 
as input signals. The PLC, in which a user program for 
controlling the controlled system has been installed in 
advance, generates outputs signals (relay signals) for 
controlling the actuators in accordance with the user pro- 
gram in response to the input signals. 

In general, the function of the PLC, namely the user 
program that has been installed in the PLC, is expressed 
by a ladder circuit (diagram). A ladder circuit comprises 
a plurality of individual ladder circuits. 

Fig. 27 shows an example of a ladder circuit repre- 
sented by a ladder diagram. This ladder circuit has indi- 
vidual ladder circuits L01, L02 and L03. 

The individual ladder circuit L01 is composed of con- 
tacts (actual input contacts) 001 and 002 representing 
the status of input signals provided by the detectors of a 
controlled system, and an output relay 003. The individ- 
ual ladder circuit L02 is composed of actual input con- 
tacts 004, 005, 006 and 007, a contact (internal auxiliary 
contact) 003 controlled by the output relay 003, and an 
output relay 008. The individual ladder circuit L03 is com- 
posed of actual input contacts 009, 010, an internal aux- 
iliary contact 008 controlled by the output relay 008, a 
self-holding contact 01 1 of an output relay 011, and the 
output relay 011. 

The contacts 001, 003, 005, etc., are a contacts 
(make contacts), and the contacts 002, 004 and 006, 
etc., are b contacts (break contacts). 

If all of the serially connected contacts are ON 
(closed), then the output relay connected to these con- 
tacts also is ON (closed). The relay outputs are sent to 
actuators to actuate them. For example, if the contacts 
001 and 002 in the individual ladder circuit L01 are ON, 
then the output relay 003 also is ON. Further, if the con- 
tacts 004, 005, 003 and 006 are ON or the contacts 007 



and 006 are ON in the individual ladder circuit L02, then 
the output relay 008 also is ON. 

In a case where a prescribed operation is not per- 
formed in the PLC constituted by such a ladder circuit 
owing to a failure in the controlled system or a defect in 
a contact, the operator ascertains the abnormal location 
by referring to the states of the input/output signals and 
the ladder diagram of the PLC or the program list of the 
ladder program. 

More specifically, the operator specifies the actuator 
that is not operating normally and specifies the output 
relay that is applying the output signal to the specified 
actuator. Then, while referring to the ladder diagram or 
program list, the operator scans and checks, one by one, 
the plurality of contacts connected to the specified output 
relay. 

For example, consider a case in which the specified 
output relay is the output relay 01 1 , which is in the OFF 
state regardless of the fact that it should be ON. 

First, the contacts 010, 008, 009 and 01 1 connected 
to the output relay 01 1 are investigated to see if they are 
ON. If the contact 008 is OFF, then the output relay 008 
controlling the contact 008 and the contacts 006, 003, 
005, 004 and 007 connected to the output relay 008 are 
investigated to see if they are ON. If, by way of example, 
the contact 003 is OFF, then the output relay 003 and the 
contacts 001 and 002 connected to the output relay 003 
are investigated. If the contact 001 is OFF, then this con- 
tact and the detector that applies the input signal to the 
contact are taken as candidates for cause of the failure. 
Alternatively, in a case where the contact 007 is an actual 
input contact and is in the OFF state, the contact 007 
and the detector that applies a signal to this contact also 
are taken as candidates for cause of the failure. 

Thus, the operator specifies the output relay that is 
not in the normal state, investigates the contacts, which 
are connected to this output relay, while tracing them in 
successive fashion, extracts a contact and the detector 
that applies the signal to this contact as candidates for 
cause of the failure and eventually specifies the faulty 
location. 

In such detection of a faulty location by the operator, 
however, a problem which arises is that the operator can- 
not specify an actuator as well as the output relay of the 
ladder circuit that applies the signal to this actuator 
unless the operator has an understanding of the overall 
operation of the entire controlled system. 

Further, even if the operator does understand the 
overall operation of the controlled system, it is not easy 
to specify an abnormally operating actuator and the out- 
put relay applying the signal to this actuator if the con- 
trolled system is large in scale and complex. 

Furthermore, even if the output relay of a ladder cir- 
cuit can be specified, it is necessary for the operator to 
ascertain the abnormal location while referring succes- 
sively to the states of the input/output signals and the 
ladder diagram or program list of the PLC. For this rea- 
son, the detection of a faulty location is a troublesome 
task and a time-consuming one as well. Accordingly, 
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repairing the failure and restarting the controlled system 
requires a long period of time. In particular, the larger the 
scale of the ladder circuit and the more complicated it 
becomes, the greater the time needed to detect the loca- 
tion of the failure. 5 

Disclosure of the Invention 

An object of the present invention is to provide a fault 
detecting apparatus and method in which a candidate for 10 
a detector that has possibly failed can be detected easily 
and in a short period of time. 

Another object of the present invention is to provide 
a fault detecting apparatus and method in which an actu- 
ator that has possibly failed can be detected easily and 15 
in a short period of time. 

Still another object of the present invention is to pro- 
vide a fault detecting apparatus and method in which an 
actuator that does not operate normally can be detected 
with ease and in a short period of time, and in which a 20 
candidate for a detector that is the cause of the abnormal 
operation can be detected with ease and in a short period 
of time. 

A further object of the present invention is to provide 
a fault detecting apparatus and method in which a can- 25 
didate for a contact due to an error in a user program or 
erroneous designation of an output relay can be detected 
with ease and in a short period of time. 

An apparatus for detecting a fault in a detector 
according to a first aspect of the present invention 30 
detects the fault through a control apparatus, which con- 
trols a controlled system including one or two or more 
detectors and one or two or more actuators, having input- 
signal memory means for storing the state of an input 
signal from the detector, auxiliary input-signal memory 35 
means for storing the state of an input signal provided 
by auxiliary-signal generating means, arithmetic-logic 
means for generating an output signal to be applied to 
the actuator in accordance with predetermined logic in 
conformity with the states of the input signals stored in 40 
the input-signal memory means and auxiliary input-sig- 
nal memory means, and output-signal memory means 
for storing the state of the output signal generated by the 
arithmetic-logic means, wherein when there is an actu- 
ator not operating normally in the controlled system, a 45 
detector that is possibly faulty in the controlled system is 
detected through the control apparatus, the apparatus 
for detecting the fault comprising a designation input unit 
for designating an identification code of an abnormal out- 
put signal corresponding to the actuator not operating so 
normally, input-signal extracting means for extracting an 
input signal that has influenced a logical operation, per- 
formed by the arithmetic-logic means, which gave rise to 
the abnormal output signal designated by the designa- 
tion input unit, determining means for determining ss 
whether the input signal extracted by the input-signal 
extracting means is the signal that has been stored in 
the input-signal memory means, and a storage device 
which, if result of the determination by the determining 
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means is that the extracted input signal is the signal that 
has been stored in the input-signal memory means, 
stores the identification code of this input signal. 

A method of detecting a fault in a detector according 
to the first aspect of the present invention detects the 
fault through a control apparatus, which controls a con- 
trolled system including one or two or more detectors and 
one or two or more actuators, having input-signal mem- 
ory means for storing the state of an input signal from 
the detector, auxiliary input-signal memory means for 
storing the state of an input signal provided by auxiliary- 
signal generating means, arithmetic-logic means for 
generating an output signal to be applied to the actuator 
in accordance with predetermined logic in conformity 
with the states of the input signals stored in the input- 
signal memory means and auxiliary input-signal memory 
means, and output-signal memory means for storing the 
state of the output signal generated by the arithmetic- 
logic means, wherein when there is an actuator not oper- 
ating normally in the controlled system, a detector that 
is possibly faulty in the controlled system is detected 
through the control apparatus, the method of detecting 
the fault comprising designating an identification code of 
an abnormal output signal corresponding to the actuator 
not operating normally, extracting an input signal that has 
influenced a logical operation, performed by the arithme- 
tic-logic means, which gave rise to the designated abnor- 
mal output signal, determining whether the extracted 
input signal is the signal that has been stored in the input- 
signal memory means, and, if result of the determination 
is that the extracted input signal is the signal that has 
been stored in the input-signal memory means, storing 
the identification code of this input signal in a storage 
device. 

In accordance with the first aspect of the present 
invention, operation is such that when the identification 
code of an abnormal output signal corresponding to an 
actuator that does not operate normally is designated, 
the input signal that has influenced the logical operation 
which produces the designated abnormal output signal 
is extracted. The identification code of an input signal 
that has been stored in the input-signal memory means 
is stored in the storage device. 

The input signal that has been stored in the storage 
device is a signal from a detector in the controlled sys- 
tem. Therefore, in a case where the actuator does not 
operate normally, a candidate for a detector causing the 
abnormality can be detected and specified easily and in 
a short period of time. 

Preferably, the identification code of the input signal 
stored in the storage device is displayed on a display unit. 
As a result, the user or operator can visually confirm 
which input signal has been extracted. 

In a preferred embodiment of the first aspect of the 
present invention, operation is such that in a case where 
the result of determination is that the extracted input sig- 
nal is the signal that has been stored in the auxiliary 
input-signal memory means and that it is controlled by 
the state of the output signal of the control apparatus, 
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processing for extracting the input signal that has influ- 
enced the logical operation, performed by the arithmetic- 
logic means, which gave rise to the abnormal output sig- 
nal that controls the state of the extracted input signal is 
repeated. 

As a result, in a case where the extracted input sig- 
nal is one controlled by the state of the output signal of 
the control apparatus, an input signal that has influenced 
the logical operation giving rise to the output signal can 
also be investigated, and it is also possible to detect a 
failure in the detector corresponding to the input signal. 

Further, in another embodiment of the first aspect of 
the present invention, operation is such that in a case 
where a plurality of input signals have been extracted, 
degree of priority is calculated with regard to each input 
signal. The extraction of the input signals ends when the 
number of input signals stored in the storage device 
becomes larger than a predetermined prescribed 
number or when there are no longer any input signals to 
be extracted. In a case where the extraction has not 
ended, the above-mentioned determination is performed 
in regular order starting from the input signal for which 
the calculated degree of priority is high when a plurality 
of input signals have been extracted, and is performed 
with regard to one input signal when one input signal has 
been extracted. 

As a result, if a plurality of candidates for cause of a 
failure have been extracted, candidates can be limited to 
that having a high degree of priority and a faulty detector 
can be discovered in a shorter period of time. 

In this embodiment, it is preferred that the degree of 
priority be calculated by performing fuzzy reasoning 
based upon features obtained with regard to each 
extracted input signal. Accurate inferential processing 
can be carried out by performing fuzzy reasoning based 
upon the features of the input signal, and it is possible to 
select only a candidate having a high possibility of being 
the cause of a failure from among the extracted plurality 
of candidates. 

In yet another embodiment of the first aspect of the 
present invention, the control apparatus is constituted by 
a programmable logic controller, the state of the input 
signal corresponds to the state of a contact of the pro- 
grammable logic controller, and the state of the output 
signal corresponds to the state of a relay of the program- 
mable logic controller. 

An apparatus for detecting a fault in an actuator 
according to a second aspect of the present invention 
detects the fault through a control apparatus, which con- 
trols a controlled system including one or two or more 
detectors and one or two or more actuators, having input- 
signal memory means for storing the state of an input 
signal from the detector, auxiliary input-signal memory 
means for storing the state of an input signal provided 
by auxiliary-signal generating means, arithmetic-logic 
means for generating an output signal to be applied to 
the actuator in accordance with predetermined logic in 
conformity with the states of the input signals stored in 
the input-signal memory means and auxiliary input-sig- 



nal memory means, and output-signal memory means 
for storing the state of the output signal generated by the 
arithmetic-logic means, wherein when there is an actu- 
ator not operating normally in the controlled system, the 
actuator is detected through the control apparatus, the 
apparatus for detecting the fault comprising first deter- 
mining means for determining whether a prescribed con- 
dition for generation of an output signal to be applied to 
the actuator has been established, second determining 
means for determining whether the state of the output 
signal is normal, and third determining means which, in 
a case where it has been determined by the first deter- 
mining means and second determining means that the 
state of the output signal has not become normal even 
upon elapse of a prescribed time from establishment of 
the prescribed condition, determines that the actuator to 
which this output signal is to be applied is faulty. 

A method of detecting a fault in an actuator accord- 
ing to the second aspect of the present invention detects 
the fault through a control apparatus, which controls a 
controlled system including one or two or more detectors 
and one or two or more actuators, having input-signal 
memory means for storing the state of an input signal 
from the detector, auxiliary input-signal memory means 
for storing the state of an input signal provided by auxil- 
iary-signal generating means, arithmetic-logic means for 
generating an output signal to be applied to the actuator 
in accordance with predetermined logic in conformity 
with the states of the input signals stored in the input- 
signal memory means and auxiliary input-signal memory 
means, and output-signal memory means for storing the 
state of the output signal generated by the arithmetic- 
logic means, wherein when there is an actuator not oper- 
ating normally in the controlled system, the actuator is 
detected through the control apparatus, the method of 
detecting the fault comprising determining whether a 
prescribed condition for generation of an output signal to 
be applied to the actuator has been established, deter- 
mining whether the state of the output signal is normal, 
and, in a case where it has been determined that the 
state of the output signal has not become normal even 
upon elapse of a prescribed time from establishment of 
the prescribed condition, determining that the actuator 
to which this output signal is to be applied is faulty. 

In accordance with the second aspect of the present 
invention, monitoring is performed to determine whether 
a condition for generation of the output signal to be 
applied to the actuator has been established or not. In a 
case where the state of the output signal is not normal 
regardless of the fact that the condition has been estab- 
lished, it is judged that the actuator to which the output 
signal is applied is faulty. Accordingly, when there is an 
actuator not operating normally, this can be detected and 
specified easily and rapidly. 

In an embodiment of the second aspect of the 
present invention, the control apparatus is constituted by 
a programmable logic controller, the state of the input 
signal corresponds to the state of a contact of the pro- 
grammable logic controller, and the state of the output 
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signal corresponds to the state of a relay of the program- 
mable logic controller. 

In this embodiment, it is preferred that all of the 
determinations be made by the programmable logic con- 
troller. As a result, the actuator fault detecting function s 
can be installed in the programmable logic controller, 
which is the control apparatus, thereby making integra- 
tion possible. 

An apparatus for detecting a fault in an actuator and 
a detector according to a third aspect of the present 10 
invention detects the fault through a control apparatus, 
which controls a controlled system including one or two 
or more detectors and one or two or more actuators, hav- 
ing input-signal memory means for storing the state of 
an input signal from the detector, auxiliary input-signal 15 
memory means for storing the state of an input signal 
provided by auxiliary-signal generating means, arithme- 
tic-logic means for generating an output signal to be 
applied to the actuator in accordance with predeter- 
mined logic in conformity with the states of the input sig- 20 
nals stored in the input-signal memory means and 
auxiliary input-signal memory means, and output-signal 
memory means for storing the state of the output signal 
generated by the arithmetic-logic means, wherein when 
there is an actuator not operating normally in the control- 25 
led system, the actuator is detected through the control 
apparatus and a detector that is possibly faulty in the con- 
trolled system and a cause of failure of the actuator is 
detected through the control apparatus, the apparatus 
for detecting the fault comprising first determining means 30 
for determining whether a prescribed condition for gen- 
eration of an output signal to be applied to the actuator 
has been established, second determining means for 
determining whether the state of the output signal is nor- 
mal, third determining means which, in a case where it 35 
has been determined by the first determining means and 
second determining means that the state of the output 
signal has not become normal even upon elapse of a 
prescribed time from establishment of the prescribed 
condition, determines that the actuator to which this out- 40 
put signal is to be applied is faulty, input-signal extracting 
means for extracting an input signal that has influenced 
a logical operation, performed by the arithmetic-logic 
means, which gave rise to the abnormal output signal 
determined by the third determining means, fourth deter- 45 
mining means for determining whether the input signal 
extracted by the input-signal extracting means is the sig- 
nal that has been stored in the input-signal memory 
means, and a storage device which, if result of the deter- 
mination by the fourth determining means is that the so 
extracted input signal is the signal that has been stored 
in the input-signal memory means, stores the identifica- 
tion code of this input signal. 

A method of detecting a fault in an actuator and a 
detector according to the third aspect of the present 55 
invention detects the fault through a control apparatus, 
which controls a controlled system including one or two 
or more detectors and one or two or more actuators, hav- 
ing input-signal memory means for storing the state of 




an input signal from the detector, auxiliary input-signal 
memory means for storing the state of an input signal 
provided by auxiliary-signal generating means, arithme- 
tic-logic means for generating an output signal to be 
applied to the actuator in accordance with predeter- 
mined logic in conformity with the states of the input sig- 
nals stored in the input-signal memory means and 
auxiliary input-signal memory means, and output-signal 
memory means for storing the state of the output signal 
generated by the arithmetic-logic means, wherein when 
there is an actuator not operating normally in the control- 
led system, the actuator is detected through the control 
apparatus and a detector that is possibly faulty in the con- 
trolled system and a cause of failure of the actuator is 
detected through the control apparatus, the method of 
detecting the fault comprising determining whether a 
prescribed condition for generation of an output signal to 
be applied to the actuator has been established, deter- 
mining whether the state of the output signal is normal, 
determining, in a case where it has been determined that 
the state of the output signal has not become normal 
even upon elapse of a prescribed time from establish- 
ment of the prescribed condition, that the actuator to 
which this output signal is to be applied is faulty, extract- 
ing an input signal that has influenced a logical operation, 
performed by the arithmetic-logic means, which gave 
rise to the abnormal output signal for which the fault has 
been determined, determining whether the extracted 
input signal is the signal that has been stored in the input- 
signal memory means, and, if result of the determination 
is that the extracted input signal is the signal that has 
been stored in the input-signal memory means, storing 
the identification code of this input signal. 

In accordance with the third aspect of the present 
invention, detection of a fault in an actuator is performed 
in the same manner as in the second aspect of the 
present invention. When it is judged that an actuator is 
faulty, a candidate for a detector causing the failure of 
the actuator is detected as in the manner of the first 
aspect of the invention automatically. As a result, actua- 
tor fault detection and extraction of a candidate for a 
detector that has possibly failed and caused the fault can 
be performed in operative association. Actuator fault 
detection can be performed easily and rapidly, and 
extraction of a candidate for failure of the detector caus- 
ing the fault also can be carried out easily and rapidly. 

Preferably, the identification code of the input signal 
stored in the storage device is displayed on a display unit. 
As a result, the user or operator can visually confirm 
which input signal has been extracted. 

In a preferred embodiment of the third aspect of the 
present invention, operation is such that in a case where 
the result of determination is that the extracted input sig- 
nal is the signal that has been stored in the auxiliary 
input-signal memory means and that it is controlled by 
the state of the output signal of the control apparatus, 
processing for extracting the input signal that has influ- 
enced the logical operation, performed by the arithmetic- 
logic means, which gave rise to the abnormal output sig- 
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nal that controls the state of the extracted input signal is 
repeated. 

As a result, in a case where the extracted input sig- 
nal is one controlled by the state of the output signal of 
the control apparatus, an input signal that has influenced 
the logical operation giving rise to the output signal can 
also be investigated, and it is also possible to detect a 
failure in the detector corresponding to the input signal. 

Further, in another embodiment of the third aspect 
of the present invention, operation is such that in a case 
where a plurality of input signals have been extracted, 
degree of priority is calculated with regard to each input 
signal. The detection of the input signals ends when the 
number of input signals stored in the storage device 
becomes larger than a predetermined prescribed 
number or when there are no longer any input signals to 
be extracted. In a case where the extraction has not 
ended, the above-mentioned determination is performed 
in regular order starting from the input signal for which 
the calculated degree of priority is high when a plurality 
of input signals have been extracted, and is performed 
with regard to one input signal when one input signal has 
been extracted. 

As a result, if a plurality of candidates for cause of a 
failure have been extracted, candidates can be limited to 
that having a high degree of priority and a faulty detector 
can be discovered in a shorter period of time. 

In this embodiment, it is preferred that the degree of 
priority be calculated by performing fuzzy reasoning 
based upon features obtained with regard to each 
extracted input signal. Accurate inferential processing 
can be carried out by performing fuzzy reasoning based 
upon the features of the input signal, and it is possible to 
select only a candidate having a high possibility of being 
the cause of a failure from among the extracted plurality 
of candidates. 

In yet another embodiment of the third aspect of the 
present invention, the control apparatus is constituted by 
a programmable logic controller, the state of the input 
signal corresponds to the state of a contact of the pro- 
grammable logic controller, and the state of the output 
signal corresponds to the state of a relay of the program- 
mable logic controller. 

In this embodiment, it is preferred that the determi- 
nation as to whether the prescribed condition for gener- 
ation of an output signal to be applied to the actuator has 
been established, the determination as to whether the 
state of the output signal is normal and the determination 
that the actuator to which the output signal is to be 
applied is faulty in a case where the state of the output 
signal has not become normal even upon elapse of a 
prescribed time from establishment of the prescribed 
condition, are made by the programmable logic control- 
ler. 

As a result, the actuator fault detecting function can 
be installed in the programmable logic controller, which 
is the control apparatus, thereby making integration pos- 
sible. 



An apparatus for detecting a fault in an input signal 
according to a fourth aspect of the present invention, 
wherein a control apparatus, which controls a controlled 
system including one or two or more detectors and one 

5 or two or more actuators, has input-signal memory 
means for storing the state of an input signal from the 
detector, auxiliary input-signal memory means for stor- 
ing the state of an input signal provided by auxiliary-sig- 
nal generating means, arithmetic-logic means for 

10 generating an output signal to be applied to the actuator 
in accordance with predetermined logic in conformity 
with the states of the input signals stored in the input- 
signal memory means and auxiliary input-signal memory 
means, and output-signal memory means for storing the 

15 state of an output signal generated by the arithmetic- 
logic means, wherein when there is an actuator not oper- 
ating normally in the controlled system, an input signal 
that is possibly abnormal is detected, the apparatus for 
detecting the fault comprising a designation input unit for 

20 designating an identification code of an abnormal output 
signal corresponding to the actuator not operating nor- 
mally, input-signal extracting means for extracting an 
input signal that has influenced a logical operation, per- 
formed by the arithmetic-logic means, which gave rise to 

25 the abnormal output signal designated by the designa- 
tion input unit, and a storage device for storing the iden- 
tification code of the input signal extracted by the input- 
signal extracting means. 

A method of detecting a fault in an input signal 

30 according to a fourth aspect of the present invention, 
wherein a control apparatus, which controls a controlled 
system including one or two or more detectors and one 
or two or more actuators, has input-signal memory 
means for storing the state of an input signal from the 

35 detector, auxiliary input-signal memory means for stor- 
ing the state of an input signal provided by auxiliary-sig- 
nal generating means, arithmetic-logic means for 
generating an output signal to be applied to the actuator 
in accordance with predetermined logic in conformity 

40 with the states of the input signals stored in the input- 
signal memory means and auxiliary input-signal memory 
means, and output-signal memory means for storing the 
state of an output signal generated by the arithmetic- 
logic means, wherein when there is an actuator not oper- 

45 ating normally in the controlled system, an input signal 
that is possibly abnormal is detected, the method of 
detecting the fault comprising designating an identifica- 
tion code of an abnormal output signal corresponding to 
the actuator not operating normally, extracting an input 

so signal that has influenced a logical operation, performed 
by the arithmetic-logic means, which gave risetothedes- 
ignated abnormal output signal, and storing the identifi- 
cation code of the extracted input signal in a storage 
device. 

55 In accordance with the fourth aspect of the present 
invention, operation is such that when the identification 
code of an abnormal output signal corresponding to an 
actuator that does not operate normally is designated, 
the input signal that has influenced the logical operation 
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which produces the designated abnormal output signal 
is extracted. The extracted input signal is stored in the 
storage device. 

Accordingly, in a case where the actuator does not 
operate normally, all candidates for an abnormal input 5 
signal that is the cause can be detected and specified 
easily and in a short period of time. 

Preferably, the identification code of the input signal 
stored in the storage device is displayed on a display unit. 
As a result, the user or operator can visually confirm 
which input signal has been extracted. 

Brief DescriptiQn gf the Drawing? 

Fig. 1 is a block diagram illustrating the constructions 
of a fault detecting apparatus, a PLC and a control- 
led system; 

Fig. 2 is a structural view showing an example of the 
controlled system; 

Fig. 3 is a ladder diagram showing an example of a 
user program; 

Fig. 4 is a ladder diagram showing an example of a 
user program; 

Figs. 5 and 6 are flowcharts illustrating the flow of 
processing for detecting failure of a detector; 
Figs. 7 and 8 are flowcharts illustrating the flow of 
processing for extracting and storing contacts in an 
OFF state; 

Figs. 9 and 10 are flowcharts illustrating the flow of 
processing for extracting and storing contacts in an 
ON state; 

Figs. 11 and 12 are flowcharts illustrating the flow of 
processing for automatically selecting contacts that 
possibly are faulty in ladder program; 
Figs. 13a through 13c show the structure of a stack; 
Fig. 1 4 is a ladder diagram showing an example of 
a ladder program; 

Figs. 15a through 15f show membership functions 
of contact features 1 through 6; 
Fig. 16a shows fuzzy reasoning rules for obtaining 
degree of priority of a contact, and Fig. 16b shows 
a membership function of the consequents of the 
rules shown in Fig. 16a; 

Fig. 17a is a ladder diagram showing an example of 
a ladder program, and Fig. 17b shows the values of 
contact features 1 through 6 in Fig. 1 7a; 
Fig. 18a illustrates degrees of membership of ante- 
cedents and consequents in a case where fuzzy rea- 
soning is performed with regard to the contacts of 
Fig. 17a, and Fig. 18b illustrates degrees of priority 
of the contacts obtained by fuzzy reasoning; 
Fig. 1 9 is a flowchart showing the flow of processing 
for detecting failure of an actuator; 
Fig. 20 is a ladder diagram illustrating an example 
of a ladder program to which a function for detecting 
failure of an actuator has been added; 
Figs. 21 and 22 are flowcharts showing the flow of 
processing for detecting failure of an actuator and 
detector; 



Figs. 23 and 24 are flowcharts showing the flow of 
processing for detecting failure of internal auxiliary 
contacts and special auxiliary contacts or program- 
ming error; 

Figs. 25 and 26 are flowcharts showing the flow of 
processing for extracting and storing contacts other 
than internal auxiliary contacts; and 
Fig. 27 is a ladder diagram showing an example of 
a ladder program. 

Pest Mode for Carrying Out the Invention 

I. Fault detecting apparatus and control system 

Fig. 1 is a block diagram illustrating the construction 
of a fault detecting apparatus 1 and of a control system 
comprising a PLC 2 and a controlled system 3 controlled 
by the PLC 2. 

The fault detecting apparatus 1 detects failure of 
detectors (sensors and switches such as proximity 
switches, limit switches and photoelectric detectors) and 
actuators (air cylinders, hydraulic cylinders, motors, etc.) 
of the controlled system 3, and detects abnormality in 
the contacts of the PLC 2. The fault detecting apparatus 

1 is constructed as a unit separate from the PLC proper. 
Of course, all of the functions of the fault detecting appa- 
ratus 1 can be incorporated in the PLC proper so that 
the fault detecting apparatus 1 and PLC 2 may be con- 
structed as a single body. 

The fault detecting apparatus 1 is constituted by a 
CPU 11, a ROM 12, a RAM 13, a keyboard 14, a display 
unit 15 and an interface circuit 16. These devices are 
interconnected by a system bus 1 7. 

The ROM 12 stores a program for detecting faulty 
locations and a program for controlling devices (the key- 
board 14, display unit 15, etc.) constructing the fault 
detecting apparatus 1 . 

In accordance with the programs that have been 
stored in the ROM 1 2, the CPU 1 1 executes fault detect- 
ing processing and controls each of the devices con- 
structing the fault detecting apparatus 1. 

The RAM 13 temporarily stores data resulting the 
processing executed by the CPU 1 1 , data entered by the 
user or operator (user) via the keyboard 1 4, and data that 
is input/output between the fault detecting apparatus and 
the PLC 2 via the interface circuit 16. 

The keyboard 14 is for allowing the user to enter 
data. The entered data is the number of an output relay 
or the number of a contact, etc., of a ladder circuit, as 
will be set forth later. 

The display unit 1 5, which is for displaying the results 
of fault detection processing, is constituted by a CRT or 
the like. For example, the number of a contact extracted 
as the cause of a failure is displayed as the result of fault 
detection processing. 

The interface circuit 16 carries out data communica- 
tion between the fault detecting apparatus 1 and the PLC 

2 via an interface bus 18, and performs control for data 
communication. 
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The PLC 2 is constituted by a CPU 21 , a ROM 22, 
a RAM 23, an interface circuit 24 and an I/O unit 25. 
These devices are interconnected by a system bus 26. 

A ladder-control system program is stored in the 
ROM 22. 5 

A user program (ladder program) created by the user 
in order to control the controlled system is stored in part 
of the area of the RAM 23, and an I/O table holding the 
ON, OFF states of actual input/output signals of the PLC 
is stored in the other part. w 

The CPU 21 controls the controlled system 3 in 
accordance with the ladder-control system program 
stored in the ROM 22 and the user program stored in the 
RAM 23. 

The interface circuit 24 is connected to the interface is 
circuit 1 6 of the fault detecting apparatus 1 by the inter- 
face bus 18 and, as set forth above, performs data com- 
munication between the fault detecting apparatus 1 and 
PLC 2 and carries out control for data communication. 

The I/O unit 25 sends and receives input/output sig- 20 
nals to and from the detectors and actuators of the con- 
trolled system 3 via a PLC I/O data bus 27. 

Though the details will be described later, the con- 
trolled system 3 is equipped with a plurality of detectors 
for detecting workpieces or burrs on the workpieces, and 25 
a plurality of actuators for controlling pneumatic cylin- 
ders, which remove defective workpieces. or drilling 
motors. These detectors and actuators send and receive 
input/output signals to and from the I/O unit 25 of the PLC 
2 via the PLC I/O data bus 27. 30 

II. Construction of controlled system and example of con- 
trol thereof 

Fig. 2 shows an example of the controlled system 3. 35 
Workpieces W are conveyed by a conveyor 91, 
which is driven by a first motor (M 1) 72. Detection of the 
presence of workpieces W and detection of burrs on the 
workpieces W is performed automatically at points along 
the conveyor 91 . A first workpiece detector 55 and a burr 40 
detector 56 are provided for these purposes. If it is 
detected that a workpiece W has a burr or that a burr is 
larger than a prescribed quantity, this workpiece is 
removed from the conveyor 91 by a defect-rejecting 
pneumatic cylinder 73. Rotation of the motor 72 is halted 45 
during operation of the cylinder 73, thereby stopping the 
conveyor 91. 

A workpiece W conveyed to the end of the conveyor 
91 by the conveyor is shifted onto a conveyance base 
92. A retention detector 57 is provided for detecting the so 
workpiece Wthat has been conveyed to the proximity of 
the end of the conveyor 91 . If detection of the workpiece 
W by the retention detector 57 continues for more than 
a fixed period of time, an abnormality lamp 71 lights on 
a control panel 90. 55 

A second workpiece detector 58 is provided in order 
to detect the workpiece W that has been shifted onto the 
conveyance base 92. When the workpiece W is detected 
by the workpiece detector 58, a carry-in pneumatic cyl- 



inder 75 is driven so that the workpiece W is pushed 
along the conveyance base 92 toward a machining table 
93 by a rod provided in the carry-in pneumatic cylinder 
75. The workpiece W transferred to the machining table 
93 is detected by a third workpiece detector 61 . 

When the workpiece W is transferred to the machin- 
ing table 93, a jig 77 that secures the workpiece W is 
driven in a direction in which it will clamp the workpiece. 
Further, a second motor (72) 78 is driven into rotation so 
that a drill 79 secured to the rotary shaft of the motor 78 
will descend along with the motor 78 and drill a hole in 
the workpiece W. After the drilling operation, the drill 79 
is raised along with the motor 78 and rotation of the motor 
78 is halted. The drilled workpiece is ejected from the 
machining table 93 by an ejecting pneumatic cylinder 81 . 

The control panel 90 is provided with an operation 
switch 50, a stop switch 51 , a removal switch 52, an in- 
operation lamp 70 and an abnormality lamp 71 . By turn- 
ing on the operation switch 50, the above-described 
series of steps that commences with start-up of the 
motor 72 begins and the in-operation lamp 70 lights. 
When the stop switch 51 is turned on, the operations per- 
formed in the above-mentioned steps halt and the in- 
operation lamp 70 is extinguished. When the detection 
signal from the detector 57 continues in excess of the 
fixed period of time, as set forth above, the abnormality 
lamp 71 lights and the in-operation lamp 70 is extin- 
guished. If the removal switch 52 is turned on in this state, 
the abnormality lamp 71 is extinguished. 

The defect-rejecting pneumatic cylinder 73 is pro- 
vided with a defect forward-end detector for detecting 
that the cylinder rod has been advanced (forwarded) to 
a forward end, and with a defect rearward-end detector 
for detecting that the cylinder rod has been retracted to 
a rearward end. (Neither of the detectors is shown.) Sim- 
ilarly, the carry-in cylinder 75 is provided with a carry-in 
forward-end detector and a carry-in rearward-end detec- 
tor, and the ejecting pneumatic cylinder 81 is provided 
with an ejection forward-end detector and an ejection 
rearward-end detector (none of these detectors being 
shown). Furthermore, there are provided a drill upper- 
end detector for detecting that the drill 79 (as well as the 
motor 78 in which the drill is mounted) has ascended to 
its raised end, and a drill lower-end detector for detecting 
that the drill 79 (as well as the motor) has descended to 
its lowered end. (Neither of the detectors is shown.) 

The signals which enter the PLC 2 from the control- 
led system 3 are as follows, where (000) to (01 5) at the 
head are the numbers of the input signals and the word- 
ing within the parentheses at the tail is an abbreviated 
expression: 

(000) ON/OFF signal of operation switch 50 (opera- 
tion SW) 

(001) ON/OFF signal of stop switch 51 (stop SW) 

(002) ON/OFF signal of removal switch 52 (removal 
SW) 

(003) detection signal from defect forward-end 
detector (defect forward end) 
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(004) detection signal from defect rearward-end 
detector (defect rearward end) 

(005) workpiece detection signal from first work- 
piece detector 55 (detection 1) 

(006) burr detection signal from burr detector 56 5 
(burr detection) 

(007) detection signal from retention detector 57 
(retention detection) 

(008) workpiece detection signal from second work- 
piece detector 58 (detection 2) 

(009) detection signal from carry-in forward-end 
detector (carry-in forward end) 

(010) detection signal from carry-in rearward-end 
detector (carry-in rearward end) 

(011) workpiece detection signal from third work- 
piece detector 61 (detection 3) 

(012) detection signal from drill upper-end detector 
(drill upper end) 

(013) detection signal from drill lower-end detector 
(drill lower end) 

(014) detection signal from ejection forward-end 
detector (ejection forward end) 

(015) detection signal from ejection rearward-end 
detector (ejection rearward end) 

The signals output from the PLC 2 to the control- 
led system 3 are as follows, where (100) to (012) at the 
head are the numbers of the output signals and the word- 
ing within the parentheses at the tail is an abbreviated 
expression: 

(1 00) ON/OFF control signal of in-operation lamp 70 
(in-operation L) 

(101) ON/OFF control signal of abnormality lamp 71 
(abnormality L) 

(102) rotating<lrive control signal of first motor 72 
(M1 rotation) 

(103) advance-drive control signal of defect-reject- 
ing cylinder 73 (defect advance) 

(104) retraction-drive control signal of defect-reject- 
ing cylinder 73 (defect retraction) 

(105) advance-drive control signal of carry-in cylin- 
der 75 (carry-in advance) 

(106) retraction-drive control signal of carry-in cylin- 
der 75 (carry-in retraction) 

(1 07) clamping-drive control signal of fixing jig 77 (jig 
clamp) 

(108) rotating-drive control signal of second motor 
78 (M2 rotation) 

(109) raising-drive control signal of drill 79 (drill 
ascent) 

(110) lowering-drive control signal of drill 79 (drill 
descent) 

(111) advance-drive control signal of ejecting cylin- 
der 81 (ejection advance) 

(112) retraction-drive control signal of ejecting cylin- 
der 81 (ejection retraction) 



Figs. 3 and 4 illustrate part of a program (user pro- 
gram) stored in the RAM 23 of PLC 2. The program is 
represented using contacts turned ON and OFF by input 
signals, output relays for generating output signals, con- 
tacts turned ON and OFF by the output relays, internal 
auxiliary relays and their contacts. 

The meaning of the internal auxiliary relays and their 
contacts illustrated in Figs. 3 and 4 is as follows: "CUR- 
RENTLY SET represents the start of overall drilling 
machining; the relay or contact is ON until completion of 
drilling and ejection of the workpiece. "SETTING COM- 
PLETED" represents that setting of the workpiece on the 
machining table has been completed. "MACHINING 
COMPLETED" represents that ejection of the workpiece 
from the machining table has been completed. "CARRY- 
IN STORED" represents that the workpiece has been 
carried in to the machining table; the relay and contact 
are ON until machining and ejection of the workpiece 
have been completed. "DRILLING IN PROGRESS" rep- 
resents that the workpiece has been set on the machin- 
ing table; the relay and contact are ON until drilling is 
completed. "DRILLING COMPLETED" represents that 
drilling of the workpiece has been completed. "DRILL- 
ING STORED" represents that the drill has drilled the 
workpiece; the contact is ON until the completion of drill- 
ing. 

111. Fault detection processing by fault detecting appara- 
tus 

(1) Processing for detecting faulty detectors 

Figs. 5 and 6 are flowcharts illustrating the flow of 
processing through which the fault detecting apparatus 
1 detects a candidate for a detector that is possibly faulty 
in a case where a failure has developed in a detector of 
the controlled system 3. Figs. 7 and 8 are flowcharts illus- 
trating the detailed flow of processing of a step 304 in 
Fig. 5. Figs. 9 and 10 are flowcharts illustrating the 
detailed flow of processing of a step 305 in Fig. 5. 

A user specifies an actuator that does not perform 
a prescribed operation in the controlled system 3. The 
user specifies the relay (output relay) applying the signal 
to this actuator and enters the information (e.g., the relay 
number) specifying this output relay into the fault detect- 
ing apparatus 1 using the keyboard 14 (step 301). The 
CPU 1 1 stores the entered relay number in the RAM 13. 

Next, using the keyboard 14, the user enters into the 
fault detecting apparatus 1 whether the proper state that 
is to be established at the designated relay is the ON 
(closed) or OFF (open) state (step 302). This state also 
is stored in the RAM 13 by the CPU 1 1 . 

If the designated relay is in the OFF state regardless 
of the fact that it is originally intended to be in the ON 
state (YES at step 303), then an OFF contact that is the 
cause of this condition should be among the contacts 
that have been connected to the designated relay. There- 
fore, OFF contacts are extracted and stored in the RAM 
13 (step 304). If the designated relay is in the ON state 
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regardless of the fact that it is originally intended to be 
in the OFF state (NO at step 303). then an ON contact 
that is the cause of this condition should be among the 
contacts that have been connected to the designated 
relay. Therefore, ON contacts are extracted and stored 5 
in the RAM 13 (step 305). 

Extraction of the contacts is carried out by the CPU 
1 1 , which accesses the PLC 2 using the interface circuit 
1 6 and interface bus 1 8 and searches the ladder program 
that has been stored in the RAM 23 of the PLC 2. Veri- 10 
fication of the ON or OFF state of an extracted contact 
is carried out by searching the I/O table holding the ON, 
OFF states of each of the contacts in the ladder program. 
The details of the processing executed at steps 304, 305 
will be described later. 15 

All contacts extracted and stored in the RAM 13 are 
displayed on the display unit 15 to inform the user (step 
306). 

In a case where a plurality of contacts are displayed 
on the display unit 1 5 (YES at step 307), the user selects 20 
one contact from among the displayed contacts, and 
information (e.g., the contact number) which designates 
this contact is entered into the fault detecting apparatus 
1 using the keyboard 1 4 (step 308). If one contact is dis- 
played (NO at step 307), then this contact is selected 25 
automatically by the CPU 1 1 . 

The fact that the contact has been sel ected is written 
in the RAM 13 by the CPU 1 1 with regard to the selected 
contact (e.g., a flag indicating that the contact has been 
selected is set) so that selection of the same contact will 30 
not occur in subsequent processing (step 309). 

Next, it is determined whether the selected contact 
is an actual input contact (step 310). The term "actual 
input contact" refers to a contact which represents the 
state of the input signal applied to it from the detector of 35 
the controlled system 3. 

The determination as to whether the contact is an 
actual input contact or not can be performed by storing 
a table, in which the numbers of the actual input contacts 
have been registered, in the RAM 13 or RAM 23 in 40 
advance, and checked to see whether the number of the 
selected contact resides in this table. If the number of 
the selected contact resides in the table, then this contact 
is an actual input contact. Alternatively, the foregoing can 
be performed by searching the ladder program to deter- 45 
mine whether there is a relay whose number is the same 
as that of the contact. If there is a relay whose number 
is identical with that of the selected contact, then this con- 
tact is not an actual input contact. In Fig. 3, the contact 
1 05 at address 00048 in the ladder circuit is not an actual so 
input contact because there is relay 1 05 having the same 
numb©- located at address 00039. 

In a case where the selected contact is an actual 
input contact (YES at step 310), the fact that this contact 
is a candidate for cause of failure is displayed on the dis- 55 
play unit 1 5 to so inform the user (step 311). 

Next, whether the contacts stored in the RAM 13 
include a contact that has not been selected is deter- 
mined by the CPU 11 (step 31 2). If an unselected contact 



does reside in the RAM 13 (YES at step 312), the user 
makes an entry as to whether or not investigation of other 
contacts as cause of failure is to continue. In a case 
where investigation of other candidates is to continue 
(YES at step 313), then processing from step 307 is 
repeated in order perform the processing for other con- 
tacts. 

Processing is terminated in a case where unse- 
lected contacts do not remain in the RAM 1 3 (NO at step 
312) or in a case where investigation of other candidates 
is not to continue (NO at step 313). 

In a case where the selected contact is not an actual 
input contact at step 310, it is determined whether this 
contact is an internal auxiliary contact (step 314). 

The term "internal auxiliary contact" refers to a con- 
tact which is not an actual input contact (a contact rep- 
resenting the state of the input signal from the detector 
in the controlled system 3) but a contact controlled by an 
output relay or internal auxiliary relay. Whether or not a 
contact is an internal auxiliary contact can be determined 
by checking to see whether a relay having the same 
number as that of this contact is present in the ladder 
program. If there is a contact having a number the same 
as that of this contact, then this contact is an internal aux- 
iliary contact. 

In a case where the selected contact is an internal 
auxiliary contact (YES at step 314), a relay (an output 
relay or internal auxiliary relay) having the same number 
as that of this contact is retrieved (step 315). This is 
because the fact that the internal auxiliary contact is the 
cause of a failure is considered to mean that the contact 
connected to the relay that controls the state of this inter- 
nal auxiliary contact is the cause of the failure. The 
processing from step 303 onward is repeated in order to 
extract a contact that is a candidate for the cause of the 
failure from among the contacts that have been con- 
nected to the retrieved relay and to store this contact in 
the RAM 13. 

In a case where the selected contact is not an actual 
input contact and is not an internal auxiliary contact (NO 
at step 3 1 4) . processi ng regarding this contact is not exe- 
cuted and processing from step 31 2 onward is executed 
in order to execute processing with regard to the other 
contacts that have been stored in the RAM 13. 

An example of a component which is not an actual 
input contact and not an internal auxiliary contact is a 
special auxiliary contact or link relay, etc. 

A special auxiliary contact is a contact whose ON or 
OFF state is controlled by the ladder-control system pro- 
gram or the like. For example, such contacts include a 
contact whose state is controlled by a clock signal or 
whose state is decided by an operational instruction or 
a flag. A link relay is a contact the state of which is con- 
trolled by a PLC other than the PLC 2 via communication 
means. 

These contacts are not subjected to processing 
because they do not take part in fault detection of the 
detectors in the controlled system 3. 
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The details of the processing of step 304 will now be 
described on the basis of Figs. 7 and 8. In a case where 
a relay is in the OFF state regardless of the fact that it 
should be in the ON state, the processing of step 304 
extracts a contact in the OFF state as the cause. 5 

As one example a case will be considered in which 
the carry-in cylinder 75 in Fig. 2 remains in an advanced 
state and will not retract. 

In response to the fact that the carry-in cylinder 75 
will not retract, the user ascertains that the carry-in 
retraction signal 1 06, namely the output relay 1 06 (carry- 
in retraction) in Fig. 3, is abnormal (OFF) and uses the 
keyboard 14 to enter the number of the output relay 106 
into the fault detecting apparatus 1 . 

As set forth above, first a contact is extracted by 
searching the user program (ladder program) that has 
been stored in the RAM 23. Next, the ON or OFF state 
of the contact is checked by searching the I/O table that 
has been stored in the RAM 23. If the state of the contact 
is OFF, this contact is stored in the RAM 13. 

Processing for extracting a contact will now be 
described in accordance with the ladder diagram of Fig. 
3. 

An OFF contact, which is a candidate for cause of a 
failure, is extracted by searching the ladder circuit (ladder 
program) from the output relay 106 to a bus-line R (Fig. 
3). 

First, the search point is advanced along line L1 (Fig. 
3) from the relay 106 toward the bus-line R and a deter- 
mination is made as to whether a branch point (branch 
point P1 in Fig. 3) at which contacts have been con- 
nected in parallel has been passed (step 321). In a case 
where the ladder program is expressed in the form of 
mnemonic symbols, the search in the program describ- 
ing an individual ladder diagram is carried out from an 
OUT instruction to an LD instruction (load instruction). If 
an OR instruction or OR LD instruction (OR load instruc- 
tion) is contained in the program, it is understood that a 
branch point has been reached. 

Since the contacts 105 and 010 are located ahead 
of the branch point P1 , the search point does not pass 
the branch point (NO at step 32 1 ) and the contact 1 05 is 
extracted (step 323). 

Next, it is determined whether the extracted contact 
105 is in the ON state or not (step 324). Assume that the 
contact 105 is in the OFF state. In this case (NO at step 
324), the number 1 05 of the contact and the number 1 06 
of the designated relay are compared (step 325). Since 
the two numbers do not agree in this case (NO at step 
326), the contact 105 is stored in the RAM 13 as a can- 
didate for cause of failure (step 327). 

The reason for comparing the number of the 
extracted contact and the number of the designated relay 
is to exclude self-holding contacts from being the object 
of extraction. For example, the contact 1 06 is a self-hold- 
ing contact of relay 106, and the contact 106 also is 
turned ON and OFF by the turning ON and OFF of the 
relay 1 06. Accordingly, it is unnecessary for the self-hold- 
ing contact to be adopted as an object of extraction. 



Next, it is determined whether the search point has 
reached the bus-line R of the ladder circuit (step 328). In 
mnemonic representation, it is understood that the bus- 
line has been reached if there is an LD instruction (load 
instruction). 

Since the search point has not reached the bus-line 
R (NO at step 328), processing is repeated from step 
321. The contact 010 is extracted and it is determined 
whether the contact 010 is in the ON state (steps 321 to 
324) in the same manner as in the case of the contact 
105. Assume that the contact 010 is in the ON state. In 
this case (YES at step 324), the contact 010 is not 
deemed to be a contact causing failure and the contact 
is not stored in the RAM 13. 

When the search point advances further toward the 
bus-line R from the contact 010, it passes the branch 
point P1 (YES at step 321) and, hence, the branch point 
P1 is stored in the RAM 13 (step 322). One line L2 
branching from the branch point P1 is selected and the 
contact 009 is extracted (step 323). Assume that the con- 
tact 009 is in the OFF state. The branch Point 009 is 
stored in the RAM 13 as a candidate for cause of failure 
(steps 324 to 327). 

When the search point advances along the line L2, 
it reaches the bus-line R (YES at step 328) and therefore 
it is determined whether there is a branch point that has 
been stored (step 329). Since branch point P1 has been 
stored (YES at step 329), the search point is moved to 
the branch point P1 stored most recently (stored last) 
(step 330). (In this embodiment, branch point P1 is the 
sole branch point and therefore is the branch point stored 
most recently.) The branch point P1 is then erased from 
the RAM 13 (step 331). 

The search point is moved from the branch point P1 
along one other line L3 and extraction of the contact is 
performed (steps 321 to 323). Contact 106 is extracted 
on line L3. However, since this contact constructs a self- 
holding circuit together with the relay 106, as mentioned 
above, the contact is not stored in the RAM 13 even if 
the contact is OFF (YES at step 326). 

The search point reaches the bus-line R on line L3 
(YES at step 328) and, since there are no stored branch 
points (NO at step 329), processing for extracting con- 
tacts that are the cause of failure ends. 

The contacts extracted and stored in the RAM 13 
are contacts 1 05 and 009. The processing from step 306 
onward in Fig. 5 is applied to these contacts as set forth 
above. In a case where the contact 105 has been 
selected at step 308, the relay 105 is retrieved at step 
316 because the contact 1 05 is an internal auxiliary con- 
tact. The ON, OFF states of the contacts 204, 106 and 
so on connected to the relay 105 also are investigated 
and, if a contact is in the OFF state, it is stored in the 
RAM 13. 

Next, the details of the processing of step 305 will 
be described on the basis of Figs. 9 and 10. In a case 
where a relay is in the ON state regardless of the fact 
that it should be OFF, the processing of step 305 extracts 
an ON contact as the cause. 
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As one example a case will be considered in which 
the drill 79 in Fig. 2 remains in a lowered state and will 
not ascend. 

In response to the fact that the drill 79 will not 
ascend, the user ascertains that the drill descent signal s 
1 1 0, namely the output relay 1 1 0 (drill descent) in Fig. 4, 
is abnormal (ON state) and uses the keyboard 1 4 to des- 
ignate the relay 110. 

An ON contact that is a candidate for cause of failure 
is extracted by searching the ladder circuit from the des- 10 
ignated relay 1 10 to a bus-line R. 

First, the search point is advanced along line L4 (Fig. 
4) from the relay 1 10 toward the bus-line R and a deter- 
mination is made as to whether a branch point (branch 
point P2 in Fig. 4) at which contacts have been con- 15 
nected in parallel has been passed (step 341). Since the 
contacts 109 and 013 are located ahead of the branch 
point P2, the search point does not pass the branch point 
(NO at step 341) and the contact 109 is extracted (step 
343). 20 

Next, it is determined whether the extracted contact 

109 is in the OFF state or not (step 344). Assume that 
the contact 109 is in the ON state. In this case (NO at 
step 344), the number 1 09 of the contact and the number 

110 of the designated relay are compared (step 345). 25 
Since the two numbers do not agree in this case (NO at 
step 346), the contact 109 is stored in the RAM 13 as a 
candidate for cause of failure (step 347). This is to 
exclude self-holding contacts from being the object of 
extraction, mentioned earlier. 30 

Next, it is determined whether the search point has 
reached the bus-line R of the ladder circuit (step 351). 
Since the search point has not reached the bus R (NO 
at step 351), processing is repeated from step 341 . The 
contact 013 is extracted in the same manner as in the 35 
case of the contact 109. If it is assumed that the contact 
013 is in the ON state, then the contact 013 is stored in 
the RAM 13 (steps 314 to 347). 

When the search point advances further toward the 
bus-line R from the contact 013, it passes the branch 40 
point P2 (YES at step 341) and, hence, the branch point 
P2 is stored in the RAM 13 (step 342). The search point 
advances on one line L5 from the branch point P2 and 
the contact 01 2 is extracted (step 343). Assume that the 
contact 012 is in the ON state. The branch point 012 is 45 
stored in the RAM 1 3 as a candidate for cause of failure 
(steps 344 to 347). 

Next, the contact 209 is extracted and, if it is 
assumed that the contact 209 is in the ON state, the con- 
tact 209 also is stored in the RAM 1 3. so 

Next, the contact 107 is extracted (step 343). 
Assume that this contact is in the OFF state. In this case 
(YES at step 344), among the contacts that have been 
stored in the RAM 13, the contacts 209 and 012, which 
are between the extracted contact 107 and the branch 55 
point P2, are erased from the RAM 13 (step 348). The 
reason for this is as follows: If any contact on the line L5 
between the branch point P2 and the bus-line R is in the 
OFF state, the overall state of the line L5 is OFF even if 
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the other contacts on this line are ON. Since this acts to 
place the relay 1 10 in the OFF state, the contacts on line 
L5 are not considered to be the cause of failure. In this 
case, the contact that is the cause of failure is present 
on line L4 or line L6. 

Next, the search point moves to the branch point P2 
stored most recently (last) (step 349). The branch point 
P2 is erased from the RAM 13 (step 350). 

Next, contact 1 10 is extracted on line L6 (step 343). 
However, since this contact is a self-holding circuit (YES 
at step 346), as mentioned above, the contact is not 
stored in the RAM 13. 

The search point reaches the bus-line R (YES at 
step 351) and, since there are no stored branch points 
(NO at step 352), processing for extracting contacts that 
are the cause of failure ends. 

The contacts extracted and stored in the RAM 13 
are contacts 1 09 and 013. The processing from step 306 
onward in Fig. 5 is applied to these contacts as set forth 
above. 

Thus, regardless of whether a designated relay is 
ON or OFF, a contact that is a candidate for cause of 
failure can be extracted automatically from among the 
contacts connected to this relay. In a case where an 
extracted contact is an actual input contact, the user is 
so informed. As a result, a detector corresponding to this 
actual input contact, and which is possibly causing a fail- 
ure, can be specified easily and rapidly. 

(2) Automatic selection of contacts 

If a plurality of contacts are extracted as candidates 
for cause of failure in the above-described processing for 
extracting contacts as such candidates, this result is pre- 
sented to the user, who then selects one contact from 
these contacts (step 308 in Fig. 5). 

Selection of this contact can also be carried out 
automatically. 

(2-1) Overview of processing 

Figs. 1 1 and 12 are flowcharts showing the flow of 
processing for automatically selecting a contact. As one 
example, a case will be considered in which the relay 1 1 0 
(drill descent) in Fig. 4 is in the OFF state regardless of 
the fact that it should be ON. 

The user specifies the actuator which does not per- 
form the prescribed operation in the controlled system 3 
and specifies the relay 110 corresponding to this actua- 
tor in the ladder program. 

The user enters the information (the relay number, 
etc.) designating the specified relay into the fault detect- 
ing apparatus 1 using the keyboard 14 (step 401). The 
CPU 1 1 stores the designated relay number in the RAM 
13. Further, the fact that the designated relay 110 has 
been selected is written in the RAM 13 by the CPU 11 
(step 402). For example, a flag indicating that this relay 
has been selected is prepared in the RAM 13 and this 
flag is set. 
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Next, using the keyboard 1 4. the user enters into the 
fault detecting apparatus 1 whether the proper state that 
is to be established at the relay 110 is the ON state or 
OFF state (the ON state in this example) (step 402). This 
state also is stored in the RAM 13 by the CPU 11. 

If the relay 1 10 is in the OFF state regardless of the 
fact that it is originally intended to be in the ON state (YES 
at step 404), then an OFF contact among the contacts 
that have been connected to the designated relay is 
extracted and stored in the RAM 1 3 (step 405). If the des- 
ignated relay is in the ON state regardless of the fact that 
it is originally intended to be in the OFF state (NO at step 
404), then an ON contact that is the cause of this condi- 
tion is extracted from among the contacts that have been 
connected to the designated relay, and this contact is 
stored in the RAM 13 (step 406). This processing is sim- 
ilar to that of Figs. 7 to 10 described above. 

Assume that contacts 107, 209 and 013 have been 
extracted and stored in the RAM 1 3 by the processing of 
step 405. Since a plurality of contacts have been stored 
in the RAM 1 3 (YES at step 407), the features (described 
in detail later) of these contacts that have been stored in 
the RAM 13 are obtained (step 41 1). Inferential process- 
ing is applied to each of these contacts on the basis of 
these features and the degree of priority (described in 
detail later) is determined (step 412). 

The numbers of the contacts, the relay to which 
these contacts have been connected and the degrees of 
priority of these contacts are correlated and stored 
(pushed) in a stack within the RAM 13 (step 413). 

Fig. 13a illustrates the data thus stored in the stack. 
As shown in Fig. 13a, it is assumed that the degrees of 
priority of the contacts 1 07, 209 and 0 1 3 are 0.9, 0.7 and 
0.5, respectively. Further, data having smaller values of 
degree of priority are stacked at the bottom and data hav- 
ing higher values of degree of priority are stacked at the 
top. In other words, the items of data are pushed onto 
the stack in regular order from the data having smaller 
values of degree of priority. 

Next, the data that has been stored in the stack is 
popped (step 414). That is, the contact 107 having the 
highest degree of priority among the contacts stored in 
the stack is extracted. As a result, the data of contacts 
209 and 013 remain in the stack of RAM 13, as illustrated 
in Fig. 13b. 

Next, it is determined whether the extracted contact 
1 07 is an actual input or not (step 408). Since the contact 
107 is not an actual input contact (NO at step 408). it is 
determined whether the contact 107 is an internal auxil- 
iary contact (step 409). Since the contact 1 07 is an inter- 
nal auxiliary contact (YES at step 409), the relay 1 07 that 
controls the state of this contact is retrieved (step 415). 

It is then determined whether the retrieved relay 1 07 
has already been selected (step 416). In a case where 
the relay 107 has already been selected (YES at step 
416), the contact connected to the relay 107 is one that 
has already been investigated and therefore is not inves- 
tigated here. 
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In a case where the relay 1 07 has not been selected 
(NO at step 416), processing from step 402 is repeated 
in order to carry out processing regarding contacts that 
have been connected to the relay 107. The contact 205 

5 is the only contact connected to the relay 107. Assume 
that the contact 205 is in the OFF state. The contact 205 
is extracted and stored in the RAM 13 at step 405. 

The contact stored in the RAM 13 is solely the con- 
tact 205 (NO at step 407) and this relay is an internal 

10 auxiliary contact (NO at step 408 and YES at step 409) . 
Accordingly, the relay 205 that controls the state of the 
contact 205 is retrieved, the OFF contacts connected to 
the relay 205 are extracted and these contacts are stored 
in the RAM 13 (steps 402 to 405). 

is Assume here that the contacts stored in the RAM 1 3 
are the contacts 204 and 01 1 , and that the degrees of 
priority of these contacts are 0.9 and 0.6, respectively. 
In this case, the stack of RAM 1 3 is as shown in Fig. 1 3c 
owing to the processing of step 41 3. 

20 Next, the data of contact 011 is popped from the 
stack (step 41 4). Si nee this contact is an actual input con- 
tact (YES at step 408), the contact 01 1 is stored in RAM 
13 as a candidate for cause of failure (step 410). 

It is then determined whether the number of contacts 

25 stored as candidates for cause of failure has reached a 
predetermined prescribed number (step 417). This pre- 
scribed number is entered into the fault detecting appa- 
ratus 1 beforehand by the user. This is to arrange it so 
that processing for detecting candidates for cause of fail- 

30 ure will be terminated in a case where the prescribed 
number of contacts has been selected. 

Next, it is determined whether the stack is empty, 
i.e., whether there is no data that will pop from the stack 
(step 418). Since there is data relating to the contacts 

35 204, etc., in the stack, processing is repeated from step 
414. 

In a case where it has been determined at step 41 7 
that the contacts stored as candidates for cause of failure 
is of the prescribed number, or in a case where it has 
40 been determined at step 418 that the stack is empty, 
processing ends. 

In a case where the designated contact is not an 
internal auxiliary contact (e.g., is a special auxiliary con- 
tact) (NO at step 409), this contact is not related to detec- 
45 tion of failure of a detector and therefore is not 
processed. Processing is then repeated from step 418. 

It should be noted that storage of contacts may of 
course be performed by another data structure without 
relying upon a stack. 

50 

(2-2) Contact features 

The above-mentioned features are as follows: 

55 [Feature 1] Nature of contact 

The nature of a contact indicates that the contact is 
an actual input contact (J), an internal auxiliary contact 
or a special auxiliary contact (T). 
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[Feature 2] Position of contact in ladder circuit 

t> 

The position of a contact in a ladder circuit is the 
order indicating the number of the contact counting from 
the bus-line R of the ladder circuit. For example, in Fig. 5 
1 4, contact 02 is situated at the second position counting 
from the bus-line R, and therefore the position of this con- 
tact in the ladder circuit is 2. The position of contact 05 
in the ladder circuit is 1 . 

10 

[Feature 3] Form of connection of contact 

The form of a contact connection indicates whether 
the contact is (A) serially connected or (O) parallel con- 
nected. For example, in Fig. 14, contacts 01 , 02 and 03 15 
are serially connected and therefore the form of the con- 
nection of these contacts is serial. On the other hand, 
contact 05 is not a contact serially connected to its neigh- 
bor but is connected in parallel with contacts 01 , 02 and 
03 and with contacts 06 and 07. Accordingly, the form of 20 
connection of contact 05 is parallel. 

[Feature 4] Type of contact 

Contact type indicates whether the contact is an a 25 
contact (a) or a b contact (b). 

[Feature 5] Number of rungs to actual input contact 

The number of rungs to an actual input contact may 30 
be understood as follows: By way of example, in order to 
start from contact 09, which is an internal auxiliary con- 
tact in Fig. 14, and reach contact 04, which is an actual 
input contact that influences the state of the contact 09, 
the two rungs of the individual ladder circuits L02 and 35 
L01 must be traversed. Accordingly, the number of rungs 
from contact 09 to the actual input contact is two. 

[Feature 6] Remaining number of contacts for relay to 
attain normal state (ON or OFF state) 40 

By way of example, in a case where relay 08 in the 
individual ladder circuit L01 of Fig. 1 4 is in the OFF state 
regardless of the fact that it should be ON, the relay 08 
will attain the ON state if contact 02 in line A attains the 45 
ON state. In this case, therefore, with regard to contact 
02, the number of contacts that remain in order for the 
relay to attain the normal state is one. 

Similarly, with regard to contacts 06 and 07, relay 08 
will attain the ON state if these two contacts do, and so 
therefore the remaining number of contacts with regard 
to each of contacts 06 and 07 is two. The remaining 
number of contact with regard to contact 05 is one. 

In a case where degree of priority of a contact is 
obtained, any one of these features may be used to 55 
obtain it or two or more features may be combined to 
obtain the degree of priority. Furthermore, features of 
contacts other than Features 1 through 6 may be used. 
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(2-3) Inferential processing 

Figs. 15a through 15f illustrate examples of mem- 
bership functions of respective ones of Features 1 
through 6. 

Fig. 16a shows an example of rules in a case where 
the degree of priority of each contact is obtained by fuzzy 
reasoning. Fig. 16b shows an example of a membership 
function of degree of priority. 

Rule 1 states that "If the position of the contact in 
the ladder circuit (Feature 2) is near the bus-line R (NB) 
and the type of the contact (Feature 4) is an a contact 
(a)" (antecedent), "then the degree of priority of this con- 
tact is made high (PB)" (consequent). 

In other words, generally the more important the 
contact, the closer the contact is placed to the bus-line 
R. In addition, generally the influence exerted upon a 
change in the state of the relay connected to the a con- 
tact is greater than for that connected to the b contact. 
Therefore, the degree of priority of such a contact is 
made high and detection of this contact is performed 
preferentially. 

Rule 2 states that "If the nature of the contact (Fea- 
ture 1) is that it is an actual input contact (J)" (anteced- 
ent), "then the degree of priority of this contact is made 
high (PB)" (consequent). 

This is for the purpose of preferentially detecting an 
actual input contact that is possibly faulty. In a case 
where the contact is an internal auxiliary contact, it is 
necessary to retrieve the relay corresponding to this con- 
tact and investigate the contacts connected to this relay. 
This investigation is time consuming. On the other hand, 
in a case where the contact is an actual input contact, it 
is unnecessary to retrieve another relay. Therefore, by 
investigating the actual input contact preferentially, the 
possibility that a faulty location can be detected in a short 
period of time is raised. Further, in a case where the con- 
tact is a special auxiliary contact, the influence exerted 
upon the relay to which this contact is connected is con- 
sidered to be small and the need to investigate this con- 
tact preferentially is considered to be less in comparison 
with the actual input contact. 

Rule 3 states that "If the form of the connection of 
the contact (Feature 3) is serial (A) and the number of 
remaining contacts necessary for the relay to attain the 
normal state (ON or OFF state) (Feature 6) is small (NB)" 
(antecedent), "then the degree of priority of this contact 
is made high (PB)" (consequent). 

For example, assume that contacts which are can- 
didates for cause of failure (NG) are contacts 04, 05, 06, 
08 and 09 in Figs 1 7a and 1 7b. All of these contacts fall 
under a series connection (A). However, with regard to 
the number of remaining contacts necessary for the relay 
to attain the normal state, the smallest is one in case of 
contact 09. According to Rule 3, therefore, contact 09 is 
given the highest degree of priority. 

Rule 4 states that "If the nature of the contact (Fea- 
ture 1) is that it is an internal auxiliary contact (N) and 
the position of the contact in the ladder circuit (Feature 
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2) is far from the bus-line R (PB)" (antecedent), "then the 
degree of priority of this contact is made low (NB)" (con- 
sequent). 

In the ladder circuit, generally an unimportant con- 
tact is placed far from the bus-line R. Moreover, in case s 
of an internal auxiliary contact, it is necessary to retrieve 
the relay that corresponds to this contact Accordingly, 
the degree of priority of this contact declines. 

Rule 5 states that "If the form of the connection of 
the contact (Feature 3) is parallel (O) and the number of 10 
rungs to the actual input contact influencing this contact 
(Feature 5) is neither large nor small but medium (ZR)" 
(antecedent), "then the degree of priority of this contact 
is made somewhat low (NS) n (consequent). 

In a case where a contact is connected in parallel 75 
with another contact, there is a possibility that the first- 
mentioned contact is not the cause of failure but that the 
other contact connected in parallel therewith is the cause 
of the failure. Further, if the number of rungs to the actual 
input contact is a medium value, the degree of priority is 20 
lowered somewhat since some time is required to 
retrieve the actual input contact. 

Rule 6 states that "If the type of the contact (Feature 
4) is the b contact (b) and the number of remaining con- 
tacts necessary for the relay to attain the normal state 25 
(ON or OFF state) (Feature 6) is large (PB)" (anteced- 
ent), "then the degree of priority of this contact is made 
low (NB)" (consequent). 

The reason for this is that generally the influence 
exerted upon the relay to which a contact is connected 30 
is smaller for the b contact than for the a contact. Further, 
if the number of remaining contacts for the relay to attain 
the normal state is large, the possibility that another con- 
tact is causing the failure is high and time is required to 
retrieve an actual input contact for which the possibility 35 
of failure is high. 

Rule 7 states that "If the number of rungs to an actual 
input contact (Feature 5) is large (PB) and the number 
of remaining contacts necessary for the relay to attain 
the normal state (ON or OFF state) (Feature 6) is 40 
medium (ZR)" (antecedent), "then the degree of priority 
of this contact is made somewhat low (NS)" (conse- 
quent). 

The reason for this is that if the number of rungs tra- 
versed to reach the actual input contact is large, time is 45 
required to reach the actual input contact for which the 
possibility of failure is high. In addition, if the number of 
remaining contacts for the relay connected to this contact 
(Feature 6) to attain the normal state is medium, not that 
much time is needed to retrieve the actual input contact so 
for which the possibility of failure is high. 

Rule 8 states that "If the position of the contact in 
the ladder circuit (Feature 2) is near the bus-line R (NB) 
and the number of rungs to the actual input contact (Fea- 
ture 5) is small (NB)" (antecedent), "then the degree of ss 
priority of this contact is made somewhat high (PS)" 
(consequent). 

The reason for this is that the more important the 
contact, the closer the contact is placed to the bus-line 
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R in the ladder circuit. In addition, if the number of rungs 
to the actual input contact is small, not that much time is 
needed to retrieve the actual input contact for which the 
possibility of failure is high. 

The degrees of membership of the antecedents of 
these rules are obtained by the membership functions of 
Features 1 through 6 shown in Figs. 15a through 15f. 
The degrees of membership of the consequents are 
obtained with regard to each of PB to NB in Fig. 16b on 
the basis of the degrees of membership of the anteced-, 
ents. The degree of priority of a contact is obtained as 
the weighted mean value of the membership function of 
Fig. 16b. 

By way of example, if it is assumed that the values 
of Features 1 through 6 of contact 09 are as shown in 
Fig. 17b, then the degree of priority of contact 09 is 
obtained in the manner described below. 

Fig. 18a shows the result of obtaining the degrees 
of membership of antecedents and consequents in a 
case where Rules 1 through 8 are applied to contact 09. 

Since the value of Feature 6 of contact 09 is 1 (Fig. 
1 7b), the degree of membership NB of Feature 6 is equal 
to 1 in accordance with the membership function of Fig. 
15f. Further, since contact 09 is an a contact, the degree 
of membership of Feature 4 is 1 . Accordingly, the degree 
of membership of the antecedent of Rule 1 becomes 1 
by taking the AND between the degree of membership 
of Feature 6 and the degree of membership of Feature 
4. As a result, the degree of membership for which the 
degree of priority in the consequent is PB is 1 . 

Similarly, the degree of membership of the anteced- 
ent of Rule 2 is 0 and the degree of membership for which 
the degree of priority in the consequent is PB is 0. The 
degree of membership of the antecedent of Rule 3 is 1 
and the degree of membership for which the degree of 
priority in the consequent is PB is 1 . Accordingly, for 
Rules 1 to 3 overall, the degree of membership for which 
the degree of priority is PB is 1 . 

The degree of membership of the antecedent of 
Rule 4 is 0 and the degree of membership for which the 
degree of priority in the consequent is NB is 0. The 
degree of membership of the antecedent of Rule 6 is 0 
and the degree of membership for which the degree of 
priority in the consequent is NB is 0. Accordingly, the 
degree of membership for which the degree of priority is 
NB is 0. 

In accordance with Rules 5 and 7, the degree of 
membership for which the degree of priority is NS is 0. 

The degree of membership of the antecedent of 
Rule 8 is 1 and the degree of membership for which the 
degree of priority in the consequent is PS is 1 . 

Accordingly, as shown in Fig. 18b, the degrees of 
membership for which the degrees of priority are NB and 
NS are 0, and the degrees of membership for which the 
degrees of priority are PS and PB are 1 . The degree of 
priority, which is obtained as the weighted mean of these 
values, is 0.875. where we let 0 represent the degree of 
membership for which the degree of priority is ZR. 
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As for another example, when the degree of priority 
of contact 06 is obtained in the same manner, the degree 
of priority of contact 06 is 0.75. 

Rules 1 to 8 have been cited as one example of rules 
in fuzzy reasoning. However, rules other than these may 
be used if the rules allow appropriate reasoning to be 
performed. In addition, other rules and the above-men- 
tioned Rules 1 to 8 may be used in combination. 

Of course, rather than performing fuzzy reasoning, 
it is possible to obtain only Feature 1 with regard to each 
contact and preferentially investigate only actual input 
* contacts. Only Feature 2 may be obtained with regard to 
each contact, and investigation can be performed pref- 
erentially starting from contacts at positions closest to 
the bus-line R. 

(3) Processing for detecting faulty actuators 

Fig. 1 9 is a flowchart illustrating the flow of process- 
ing through which the fault detecting apparatus 1 detects 
failure of an actuator in the controlled system 3. 

A user specifies an actuator that is the object of fault 
detection among the actuators in the controlled system 
3 and enters information (e.g., the relay number), which 
specifies the relay corresponding to this actuator, into the 
fault detecting apparatus 1 using the keyboard 14 (step 
501). All actuators of the controlled system 3 can be 
made the object of fault detection. 

Further, using the keyboard 14, the user enters a 
requirement as to the kind of condition that must be 
established for the designated relay (actuator) to be 
turned ON or OFF (actuated), as well as what is the nor- 
mal state (ON or OFF) that should be attained by the 
relay if the condition is established (step 502). An exam- 
ple of the condition is the ON or OFF state of a contact. 
Alternatively, though the details will be described later, 
the necessary condition can be written in the ladder pro- 
gram in advance. 

In a case where the ON or OFF state of a contact 
has been designated as the condition by the user, and 
when the controlled system 3 starts operating, the CPU 
1 1 of the fault detecting apparatus 1 refers to the I/O table 
in the RAM 23 of the PLC 2 to monitor whether the ON 
or OFF state (the operating condition) of the designated 
contact has been established (step 503). 

In a case where the operating condition has been 
established (YES at step 503), a timer is started (step 

504) . The time in the timer also is set by the user in 
advance. 

Next, whether the designated relay is in normal state 
(has been actuated) is determined by the CPU 1 1 (step 

505) . In a case where the designated relay has been 
actuated (YES at step 505), this means that the desig- 
nated relay (as well as the actuator to which the signal 
from this relay is applied) is operating normally. The CPU 
1 1 repeats processing from step 503 in order to monitor 
whether actuation of another designated relay (actuator) 
or the next actuation of the same relay is performed nor- 
mally or not. 
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If the designated relay is not operating (NO at step 
505), then it is determined whether the prescribed period 
of time set in the timer has elapsed (step 506). If the pre- 
scribed time period has not elapsed (NO at step 506), 

5 then it is again determined whether the relay has started 
operation (step 505). If the relay does not start operating 
even upon elapse of the prescribed time period (YES at 
step 506), a decision is rendered to the effect that the 
relay (as well as the actuator to which the signal from the 

w relay is applied) is faulty (step 507). The fact that the des- 
ignated actuator is faulty is displayed on the display unit 
15 to so inform the user. 

Fig. 20 illustrates another example in which actuator 
failure is detected. As mentioned above, the necessary 

is condition is written in the ladder program to add the actu- 
ator fault-detecting function to the ladder program. 

In the ladder program, an individual ladder circuit 
C78 including an application instruction C78C, a contact 
110 and a contact 204 is inserted ahead of address 

20 00078 in Fig. 4. A ladder circuit containing an application 
instruction is inserted by the user in advance when the 
user creates the ladder program. 

The actuator designated as an object of investiga- 
tion is the actuator to which the relay output from the relay 

25 110 (drill descent) is applied. Assume here that the relay 
110 turns ON within a time period of less than 45 sec- 
onds from the moment the contact 204 turns ON in the 
normal operating state. 

The application instruction C78C is composed of a 

30 command portion (FPD), a timer portion (#0050) and a 
message portion (DM10). 

The content of processing according to the applica- 
tion instruction is described in the command portion. For 
example, processing is described to the effect that if the 

35 application instruction has attained the ON state, the 
timer is started and the message written in the message 
portion is issued upon elapse of the time period set in 
the timer. 

The time to be counted by the timer is written in the 
40 timer portion. Here "#0050# means 50 seconds. 

The message issued from the application instruction 
is written in the message portion. The message includes 
the number of the relay undergoing monitoring, a mes- 
sage written by the use at will, etc. 
45 The application instruction C78C attains the ON 
state to start the timer when the contacts 204 and 110 
turn ON, and attains the OFF state to stop the timer when 
the contact 204 or 1 1 0 or both turns OFF. 

In a case where the contacts 204 and 1 10 are in the 
so ON state even if the time (50 seconds) set in the timer 
portion elapses from start of the timer, the application 
instruction C78C outputs the message that has been 
stored in the message portion DM10. This message is 
sent to the fault detecting apparatus 1 , where it is dis- 
ss played on the display unit 1 5. 

More specifically, in a case where the relay 110 is 
OFF and the contacts 1 10 and 204 are ON, the timer of 
the application instruction C78C is started. In the normal 
state, the relay 1 1 0 turns ON within 45 seconds from the 
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moment the contact 204 turns on, as mentioned above. 
Therefore, if the relay 110 turns on within 45 seconds, 
the contact 110 attains the OFF state, the timer of the 
application instruction C78C stops and a message is not 
issued. 5 

On the other hand, rf the relay 110 (actuator) causes 
a failure and does not attain the ON state even if the con- 
tact 204 turns ON, the contact 110 remains in the ON 
state and the timer continues running. The message is 
issued at elapse of 50 seconds. By including the number 10 
of the relay in the message, the user is capable of ascer- 
taining that the relay 110 caused the failure. 

Thus, whether a designated actuator is operating 
normally can be verified. If an actuator has failed, which 
actuator failed can be specified easily and quickly. 75 

In this embodiment, the application instruction C78C 
is described immediately ahead of the relay 1 10, which 
is object of monitoring. By thus writing the application 
instruction adjacent the relay undergoing monitoring, it 
is unnecessary to designate the relay, which is the object 20 
of monitoring, in the application instruction. Accordingly, 
at creation of a ladder program, the relay that is the object 
of monitoring can be specified without checking whether 
designation of the relay is correct or not. 

It should be noted that the ladder circuit C78 that 25 
includes the application instruction C78C can be written 
immediately after the relay 110 undergoing monitoring 
rather than immediately before it. Further, besides the 
output relay, an internal auxiliary relay, a timer or a coun- 
ter, etc., can be adopted as the object monitored for 30 
detection of failure. 

(4) Processing for detecting faulty actuators and detec- 
tors 

35 

The fault detecting apparatus 1 is capable of detect- 
ing failure of actuators and failure of detectors in concert. 
That is, the fault detecting apparatus can function as an 
overall fault detecting apparatus in which candidates for 
faulty locations can be detected easily and in a short 40 
period of time by combining both types of processing. 

Fig. 21 is a flowchart illustrating the flow of process- 
ing through which the fault detecting apparatus 1 detects 
failure of an actuator and failure of a detector in concert. 

The processing from step 601 to step 606 is the 45 
same as the processing from step 501 to step 506 in Fig. 
19. 

In a case where a designated relay (actuator) does 
not perform a prescribed operation even if the prescribed 
time set in the timer elapses (YES at step 606), candi- so 
dates for contacts that have possibly failed are extracted 
by the CPU 1 1 from among the contacts connected to 
this actuator, and the extracted contacts are stored in the 
RAM 13 (step 607). The details of processing for extract- 
ing and storing the contacts are the same as the details ss 
of processing of steps 303 to 315 in Figs. 5 and 6. 

The contacts extracted by the CPU 1 1 and stored in 
the RAM 1 3 are displayed on the display unit 1 5 to inform 
the user (step 608). Processing is then terminated. 
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Thus, in processing for detecting failure of actuators 
and detectors, detection of abnormality of an actuator to 
detection of abnormality of the detector that is the cause 
can be performed collectively through a series of 
processing steps. 

Fig. 22 is a flowchart showing the flow of processing 
for detecting failure of actuators and detectors in a case 
where an application instruction for performing actuator 
fault detection is written in a ladder program. 

As mentioned above, the application instruction 
sends a message to the fault detecting apparatus 1 in a 
case where a prescribed relay does not perform a pre- 
scribed operation within a period of time set in a timer. 
The message includes the number of the relay being 
monitored by the application instruction. 

Upon receiving the message from the PLC 2 (step 
610), the CPU 11 retrieves the relay of the ladder pro- 
gram on the basis of the number of the relay contained 
in the message (step 61 1). 

The CPU 1 1 then determines whether the retrieved 
relay is an output relay (step 612). 

In a case where the retrieved relay is an output relay 
(YES at step 612), the contacts connected to this relay 
are extracted and stored in the RAM 13 (step 613). 
Processing for extracting and storing the contacts is the 
same as the processing of steps 303 to 31 5 in Fig. 5 and 
6. 

The results of extracting the contacts are displayed 
on the display unit 15 to inform the user (step 614). 
Processing is then terminated. 

In a case where the retrieved relay is not an output 
relay (NO at step 612), error processing is executed. 
Examples of relays that are not output relays are a 
retrieved relay that delivers a keep output and a retrieved 
relay that performs the four arithmetic operations. 

An example of error processing is to display the 
retrieved relay on the display unit to inform the user of 
the fact that an error has occurred. 

An internal auxiliary relay or a timer, counter, etc., 
can be included in the relay designated by the user at 
step 601 in Fig. 21 or in the relay adopted as the object 
of monitoring by the application instruction in Fig. 20. 

(5) Processing for detecting failure of internal auxiliary 
contacts and special auxiliary contacts or programming 
errors 

Figs. 23 and 24 are flowcharts showing the flow of 
processing through which the fault detecting apparatus 
1 detects failure (abnormality) of internal auxiliary con- 
tacts and special auxiliary contacts or a programming 
error in a ladder program. 

As regards to internal auxiliary contacts and special 
auxiliary contacts, there are cases in which a program- 
ming error, such as misnumbering a contact, is made 
when the user creates the ladder program. There are 
also cases in which the ladder program contains so- 
called program bugs. 
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In the same manner as performed in the processing 
(Fig. 5) for detecting failure of detectors, information 
(e.g., relay number) designating a relay and whether the 
proper state that is to be established at the designated 
relay is the ON or OFF state are entered into the error 
detecting apparatus 1 (steps 701, 702). The CPU 11 
stores the entered information in the RAM 13. 

If the designated relay is in the OFF state regardless 
of the fact that it is originally intended to be in the ON 
state (YES at step 703), then an OFF contact is extracted 
from among the contacts connected to the designated 
relay and this contact is stored in the RAM 1 3 (step 704). 
If the designated relay is in the ON state regardless of 
the fact that it is originally intended to be in the OFF state 
(NO at step 703), then an ON contact is extracted from 
among the contacts connected to the designated relay 
and this contact is stored in the RAM 13 (step 705). The 
details of the processing of step 704 is the same as in 
Figs. 7 and 8, and the details of processing of step 705 
is the same as in Figs. 9 and 10. 

All of the contacts extracted and stored in the RAM 
1 3 are displayed on the display unit 1 5 to inform the user 
(step 706). 

In a case where a plurality of contacts are displayed 
on the display unit 15 (YES at step 707), the user selects 
one contact from among the displayed contacts and the 
number of this contact is entered into the fault detecting 
apparatus 1 using the keyboard 1 4 (step 708). if one con- 
tact is displayed (NO at step 707), then this contact is 
selected automatically by the CPU 1 1 . 

The fact that the selected contact has been selected 
is written in the RAM 13 by the CPU 11 (e.g., a flag indi- 
cating that the selected contact has been selected is set) 
so that selection of the same contact will not occur in 
subsequent processing (step 709). 

Next, it is determined whether the selected contact 
is an actual input contact (step 71 0). In a case where the 
selected contact is an actual input contact (YES at step 
710), the fact that this contact is an actual input contact 
and not an internal auxiliary contact or special auxiliary 
contact is displayed on the display unit 15 to so inform 
the user (step 711). 

In a case where the selected contact is not an actual 
input contact, i.e., in a case where the selected contact 
is an internal auxiliary contact or special auxiliary contact 
(NO at step 71 0), the fact that this contact is a candidate 
for cause of failure is displayed on the display unit 1 5 to 
so inform the user (step 714). 

In a case where the selected contact is an internal 
auxiliary contact (YES at step 715), whether the output 
relay or internal auxiliary relay that controls the state of 
this contact is to be retrieved or not is entered by the user 
(step 716). 

In case of retrieval (YES at step 716), the relay cor- 
responding to this contact is retrieved (step 717) and 
processing from step 703 is repeated in order to extract 
the contacts connected to the retrieved relay. 

In a case where the contact selected at step 715 is 
not an internal auxiliary contact, or in a case where 



retrieval is not carried out at step 716, the contacts that 
have been stored in the RAM 16 are investigated to see 
if there is a contact that has not been selected (step 71 2). 
If an unselected contact resides in the RAM 13 (YES 

5 at step 712), then whether investigation regarding the 
unselected contact is to continue or not is entered by the 
user (step 713). If investigation is to continue, (YES at 
step 713), then processing is repeated from step 707; 
otherwise (NO at step 713), processing ends. Process- 

10 ing ends also in a case where unselected contacts do 
not remain in the RAM 13 (NO at step 712). 

Processing from step 712 onward is executed even 
after the processing of step 71 1 . 

Thus, contacts that are candidates for failure of pro- 

15 gramming error can be extracted automatically with 
regard to internal auxiliary contacts and special auxiliary 
contacts. By displaying a candidate contact, the user can 
readily verify the abnormality or programming error per- 
taining to the contact. 

20 In the processing for detecting internal auxiliary con- 
tacts and special auxiliary contacts as well, the selection 
of contacts at step 708 can be performed automatically 
in the order of degree of priority by obtaining the degree 
of priority through the above-described inferential 

25 processing with regard to each contact extracted. Fur- 
ther, rather than performing inferential processing, it is 
possible to obtain only features with regard to each con- 
tact and preferentially investigate only contacts (e.g., 
internal auxiliary contacts) having a certain feature. 

30 

(6) Example of application 

As an example of application of processing for 
detecting detectors or of processi ng for detecting internal 

35 auxiliary contacts and special auxiliary contacts, a con- 
tact other than an internal auxiliary contact is extracted 
and stored. Contacts other than internal auxiliary con- 
tacts include actual input contacts, special auxiliary con- 
tacts and the above-mentioned link relays. 

ao Figs. 25 and 26 are flowcharts illustrating the flow of 
processing of this example of application. 

The processing of steps 801 to 809 is the same as 
the processing of steps 301 to 309 in Fig. 5. 

It is determined at step 810 whether a selected con- 

45 tact is an internal auxiliary contact. The determination as 
to whether a contact is an internal auxiliary contact can 
be performed by checking to see whether a relay having 
the same number as the contact is present in the ladder 
program, as set forth earlier. If a relay having the same 

so number as the contact is present in the program, then 
this contact is an internal auxiliary contact. 

In a case where the selected contact is an internal 
auxiliary contact (YES at step 810), the relay having the 
same number as this contact (the relay that controls the 

55 state of this contact) is retrieved (step 81 3) and process- 
ing is repeated from step 803 in order to investigate the 
contacts connected to the relay retrieved. 

In a case where the selected contact is not an inter- 
nal auxiliary contact (NO at step 810), this contact is 



18 




EP0 707 



stored in the RAM 1 3 as a candidate for cause of failure. 
It is then determined whether a contact not selected 
resides in the RAM 13 (step 812). If such a contact is 
present in the RAM, processing is repeated from step 
807; otherwise, processing is terminated. 5 

The selection of contacts at step 808 can be per- 
formed automatically in the order of degree of priority by 
obtaining the degree of priority through the above- 
described inferential processing with regard to each con- 
tact extracted. Further, rather than performing inferential 10 
processing, it is possible to obtain only features with 
regard to each contact and preferentially investigate only 
contacts (e.g., internal auxiliary contacts) having a cer- 
tain feature. 

Thus, it is also possible to detect abnormalities in 15 
special auxiliary contacts and link relays in addition to 
actual input contacts. 

Claims 

20 

1. An apparatus for detecting a fault in a detector 
through a control apparatus, which controls a con- 
trolled system including one or two or more detec- 
tors and one or two or more actuators, having input- 
signal memory means for storing the state of an 25 
input signal from said detector, auxiliary input-signal 
memory means for storing the state of an input sig- 
nal provided by auxiliary-signal generating means, 
arithmetic-logic means for generating an output sig- 
nal to be applied to said actuator in accordance with 30 
predetermined logic in conformity with the states of 
the input signals stored in said input-signal memory 
means and auxiliary input-signal memory means, 
and output-signal memory means for storing the 
state of the output signal generated by said arithme- 35 
tic-logic means; 

wherein when there is an actuator not oper- 
ating normally in said controlled system, a detector 
that is possibly faulty in said controlled system is 
detected through said control apparatus, said appa- 40 
ratus for detecting the fault comprising: 

a designation input unit for designating an 
identification code of an abnormal output signal cor- 
responding to the actuator not operating normally; 

input-signal extracting means for extracting 45 
an input signal that has influenced a logical opera- 
tion, performed by said arithmetic-logic means, 
which gave rise to the abnormal output signal des- 
ignated by said designation input unit; 

determining means for determining whether so 
the input signal extracted by said input-signal 
extracting means is the signal that has been stored 
in said input-signal memory means; and 

a storage device which, if result of the deter- 
mination by said determining means is that the 55 
extracted input signal is the signal that has been 
stored in the input-signal memory means, stores the 
identification code of this input signal. 
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2. An apparatus for detecting a fault in a detector 
according to claim 1 , further comprising a display 
unit for displaying the identification code of the input 
signal that has been stored in said storage device. 

3. An apparatus for detecting a fault in a detector 
according to claim 1 or 2, wherein in a case where 
the result of determination by said determining 
means is that the extracted input signal is the signal 
that has been stored in the auxiliary input-signal 
memory means and that it is controlled by the state 
of the output signal of the control apparatus, said 
input-signal extracting means repeats extraction of 
the input signal that has influenced the logical oper- 
ation, performed by said arithmetic-logic means, 
which gave rise to the abnormal output signal that 
controls the state of said extracted input signal. 

4. An apparatus for detecting a fault in a detector 
according to claim 3, further comprising degree-of- 
priority calculating means which, in a case where a 
plurality of input signals have been extracted, is for 
calculating degree of priority of each input signal; 

said input-signal extracting means ending 
extraction processing when the number of input sig- 
nals stored in said storage device becomes larger 
than a predetermined prescribed number or when 
there are no longer any input signals to be extracted; 
and 

in a case where extraction processing by said 
input-signal extracting means has not ended, said 
determining means performs the determination 
processing in regular order starting from the input 
signal for which the degree of priority is calculated 
to be high by said degree-of-priority calculating 
means when a plurality of input signals have been 
extracted, and performs the determination process- 
ing with regard to one input signal when one input 
signal has been extracted. 

5. An apparatus for detecting a fault in a detector 
according to claim 4, wherein said degree-of-priority 
calculating means calculates degree of priority by 
obtaining features of each extracted input signal and 
executing fuzzy reasoning based upon these fea- 
tures. 

6. An apparatus for detecting a fault in a detector 
according to any one of claims 1 through 5, wherein 
said control apparatus is constituted by a program- 
mable logic controller; 

the state of the input signal corresponds to 
the state of a contact of the programmable logic con- 
troller; and 

the state of said output signal corresponds to 
the state of a relay of the programmable logic con- 
troller. 
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7. An apparatus for detecting a fault in an actuator 
through a control apparatus, which controls a con- 
trolled system including one or two or more detec- 
tors and one or two or more actuators, having input- 
signal memory means for storing the state of an 5 
input signal from said detector, auxiliary input-signal 
memory means for storing the state of an input sig- 
nal provided by auxiliary-signal generating means, 
arithmetic-logic means for generating an output sig- 
nal to be applied to said actuator in accordance with 10 
predetermined logic in conformity with the states of 
the input signals stored in said input-signal memory 
means and auxiliary input-signal memory means, 
and output-signal memory means for storing the 
state of the output signal generated by said arithme- 75 
tic-logic means; 

wherein when there is an actuator not oper- 
ating normally in said controlled system, the actua- 
tor is detected through said control apparatus, said 
apparatus for detecting the fault comprising: 20 

first determining means for determining 
whether a prescribed condition for generation of an 
output signal to be applied to the actuator has been 
established; 

second determining means for determining 25 
whether the state of said output signal is normal; and 

third determining means which, in a case 
where it has been determined by said first determin- 
ing means and second determining means that the 
state of the output signal has not become normal 30 
even upon elapse of a prescribed time from estab- 
lishment of said prescribed condition, determines 
that the actuator to which this output signal is to be 
applied is faulty. 

35 

8. An apparatus for detecting a fault in an actuator 
according to claim 7, wherein said control apparatus 
is constituted by a programmable logic controller; 

the state of said input signal corresponds to 
the state of a contact of the programmable logic con- 40 
t roller; and 

the state of said output signal corresponds to 
the state of a relay of the programmable logic con- 
troller. 

45 

9. An apparatus for detecting a fault in an actuator 
according to claim 8, wherein said first determining 
means, second determining means and third deter- 
mining means are provided in the programmable 
logic controller. 50 

1 0. An apparatus for detecting a fault in an actuator and 
a detector through a control apparatus, which con- 
trols a controlled system including one or two or 
more detectors and one or two or more actuators, 55 
having input-signal memory means for storing the 
state of an input signal from said detector, auxiliary 
input-signal memory means for storing the state of 

an input signal provided by auxiliary-signal generat- 



ing means, arithmetic-logic means for generating an 
output signal to be applied to said actuator i n accord- 
ance with predetermined logic in conformity with the 
states of the input signals stored in said input-signal 
memory means and auxiliary input-signal memory 
means, and output-signal memory means for storing 
the state of the output signal generated by said arith- 
metic-logic means; 

wherein when there is an actuator not oper- 
ating normally in said controlled system, the actua- 
tor is detected through said control apparatus and a 
detector that is possibly faulty in said controlled sys- 
tem and a cause of failure of the actuator is detected 
through said control apparatus, said apparatus for 
detecting the fault comprising: 

first determining means for determining 
whether a prescribed condition for generation of an 
output signal to be applied to the actuator has been 
established; 

second determining means for determining 
whether the state of said output signal is normal; 

third determining means which, in a case 
where it has been determined by said first determin- 
ing means and second determining means that the 
state of the output signal has not become normal 
even upon elapse of a prescribed time from estab- 
lishment of said prescribed condition, determines 
that the actuator to which this output signal is to be 
applied is faulty; 

input-signal extracting means for extracting 
an input signal that has influenced a logical opera- 
tion, performed by said arithmetic-logic means, 
which gave rise to the abnormal output signal deter- 
mined by said third determining means; 

fourth determining means for determining 
whether the input signal extracted by said input-sig- 
nal extracting means is the signal that has been 
stored in said input-signal memory means; and 

a storage device which, if result of the deter- 
mination by said fourth determining means is that 
the extracted input signal is the signal that has been 
stored in the input-signal memory means, stores an 
identification code of this input signal. 

1 1 . An apparatus for detecting a fault in an actuator and 
a detector according to claim 10, further comprising 
a display unit for displaying the identification code of 
the input signal that has been stored in said storage 
device. 

1 2. An apparatus for detecting a fault in an actuator and 
a detector according to claim 10 or 11 , wherein in a 
case where the result of determination by said fourth 
determining means is that the extracted input signal 
is the signal that has been stored in the auxiliary 
input-signal memory means and that it is controlled 
by the state of the output signal of the control appa- 
ratus, said input-signal extracting means repeats 
extraction of the input signal that has influenced the 
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logical operation, performed by said arithmetic-logic 
means, which gave rise to the abnormal output sig- 
nal that controls the state of said extracted input sig- 
nal. 

5 

1 3. An apparatus for detecting a fault in an actuator and 
a detector according to claim 12, further comprising 
degree-of -priority calculating means which, in a 
case where a plurality of input signals have been 
extracted, is for calculating degree of priority of each 10 
input signal; 

said input-signal extracting means ending 
extraction processing when the number of input sig- 
nals stored in said storage device becomes larger 
than a predetermined prescribed number or when is 
there are no longer any input signals to be extracted ; 
and 

in a case where extraction processing by said 
input-signal extracting means has not ended, said 
fourth determining means performs the determina- 20 
tion processing in regular order starting from the 
input signal for which the degree of priority is calcu- 
lated to be high by said degree-of-priority calculating 
means when a plurality of input signals have been 
extracted, and performs the determination process- 25 
ing with regard to one input signal when one input 
signal has been extracted. 

14. An apparatus for detecting a fault in an actuator and 

a detector according to claim 13, wherein said 30 
degree-of-priority calculating means calculates 
degree of priority by obtaining features of each 
extracted input signal and executing fuzzy reasoning 
based upon these features. 

35 

1 5. An apparatus for detecting a fault in an actuator and 
a detector according to any one of claims 10 through 
14, wherein said control apparatus is constituted by 
a programmable logic controller; 

the state of said input signal corresponds to 40 
the state of a contact of the programmable logic con- 
troller; and 

the state of said output signal corresponds to 
the state of a relay of the programmable logic con- 
troller. 45 

1 6. An apparatus for detecting a fault in an actuator and 
a detector according to claim 1 5, wherein first deter- 
mining means for determining whether a prescribed 
condition for generation of an output signal to be so 
applied to the actuator has been established, sec- 
ond determining means for determining whether the 
state of said output signal is normal, and third deter- 
mining means which, in a case where it has been 
determined by said first determining means and sec- 55 
ond determining means that the state of the output 
signal has not become normal even upon elapse of 

a prescribed time from establishment of said pre- 
scribed condition, determines that the actuator to 
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which this output signal is to be applied is faulty, are 
provided in the programmable logic controller. 

17. An apparatus for detecting a fault in an input signal; 
wherein a control apparatus, which controls a con- 
trolled system including one or two or more detec- 
tors and one or two or more actuators, has input- 
signal memory means for storing the state of an 
input signal from said detector, auxiliary input-signal 
memory means for storing the state of an input sig- 
nal provided by auxiliary-signal generating means, 
arithmetic-logic means for generating an output sig- 
nal to be applied to said actuator in accordance with 
predetermined logic in conformity with the states of 
the input signals stored in said input-signal memory 
means and auxiliary input-signal memory means, 
and output-signal memory means for storing the 
state of the output signal generated by said arithme- 
tic-logic means; and 

wherein when there is an actuator not oper- 
ating normally in said controlled system, an input 
signal that is possibly abnormal is detected, said 
apparatus for detecting the fault comprising: 

a designation input unit for designating an 
identification code of an abnormal output signal cor- 
responding to the actuator not operating normally; 

input-signal extracting means for extracting 
an input signal that has influenced a logical opera- 
tion, performed by the arithmetic-logic means, which 
gave rise to the abnormal output signal designated 
by said designation input unit; and 

a storage device for storing the iderrtrf ication 
code of the input signal extracted by said input-sig- 
nal extracting means. 

18. A apparatus for detecting a fault in an input signal 
according to claim 17, further comprising a display 
unit for displaying the identification code of the input 
signal that has been stored in said storage device. 

19. A method of detecting a fault in a detector through 
a control apparatus, which controls a controlled sys- 
tem including one or two or more detectors and one 
or two or more actuators, having input-signal mem- 
ory means for storing the state of an input signal 
from said detector, auxiliary input-signal memory 
means for storing the state of an input signal pro- 
vided by auxiliary-signal generating means, arith- 
metic-logic means for generating an output signal to 
be applied to said actuator in accordance with pre- 
determined logic in conformity with the states of the 
input signals stored in said input-signal memory 
means and auxiliary input-signal memory means, 
and output-signal memory means for storing the 
state of the output signal generated by said arithme- 
tic-logic means; 

wherein when there is an actuator not oper- 
ating normally in said controlled system, a detector 
that is possibly faulty in said controlled system is 
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detected through said control apparatus, said 
method of detecting the fault comprising the steps 
of: 

designating an identification code of an 
abnormal output signal corresponding to the actua- 
tor not operating normally; 

extracting an input signal that has influenced 
a logical operation, performed by said arithmetic- 
logic means, which gave rise to said designated 
abnormal output signal; 

determining whether said extracted input sig- 
nal is the signal that has been stored in said input- 
signal memory means; and 

if result of said determination is that the 
extracted input signal is the signal that has been 
stored in said input-signal memory means, storing 
the identification code of this input signal in a storage 
device. 

20. A method of detecting a fault in a detector according 
to claim 19, further comprising a step of displaying 
the identification code of the input signal that has 
been stored in said storage device. 

21 . A method of detecting a fault in a detector according 
to claim 1 9 or 20, wherein in a case where the result 
of said determination is that the extracted input sig- 
nal is the signal that has been stored in the auxiliary 
input-signal memory means and that it is controlled 
by the state of the output signal of the control appa- 
ratus, extraction of the input signal that has influ- 
enced the logical operation, performed by said 
arithmetic-logic means, which gave rise to the 
abnormal output signal that controls the state of said 
extracted input signal is repeated. 

22. A method of detecting a fault in a detector according 
to claim 21 , further comprising steps of: 

calculating degree of priority of each input 
signal in a case where a plurality of input signals 
have been extracted; 

ending extraction of said input signal when 
the number of input signals stored in said storage 
device becomes larger than a predetermined pre- 
scribed number or when there are no longer any 
input signals to be extracted; and 

in a case where extraction has not ended, 
performing said determination in regular order start- 
ing from the input signal for which the degree of pri- 
ority is calculated to be high when a plurality of input 
signals have been extracted, and performing said 
determination with regard to one input signal when 
one input signal has been extracted. 

23. A method of detecting a fault in a detector according 
to claim 22, further comprising a step of calculating 
said degree of priority by obtaining features of each 
extracted input signal and executing fuzzy reasoning 
based upon these features. 



24. A method of detecting a fault in a detector according 
to any one of claims 19 through 23, wherein said 
control apparatus is constituted by a programmable 
logic controller; 

5 the state of said input signal corresponds to 

the state of a contact of the programmable logic con- 
troller; and 

the state of said output signal corresponds to 
the state of a relay of the programmable logic con- 
to trailer. 

25. A method of detecting a fault in an actuator through 
a control apparatus, which controls a controlled sys- 
tem including one or two or more detectors and one 

is or two or more actuators, having input-signal mem- 
ory means for storing the state of an input signal 
from said detector, auxiliary input-signal memory 
means for storing the state of an-input signal pro- 
vided by auxiliary-signal generating means, arith- 

20 metic-logic means for generating an output signal to 
be applied to said actuator in accordance with pre- 
determined logic in conformity with the states of the 
input signals stored in said input-signal memory 
means and auxiliary input-signal memory means, 

25 and output-signal memory means for storing the 
state of the output signal generated by said arithme- 
tic-logic means; 

wherein when there is an actuator not oper- 
ating normally in said controlled system, the actua- 

30 tor is detected through the control apparatus, the 
method of detecting the fault comprising the steps 
of: 

determining whether a prescribed condition 
for generation of an output signal to be applied to 
35 the actuator has been established; 

determining whether the state of said output 
signal is normal; and 

in a case where it has been determined that 
the state of the output signal has not become normal 
40 even upon elapse of a prescribed time from estab- 
lishment of said prescribed condition, determining 
that the actuator to which this output signal is to be 
applied is faulty. 

45 26. A method of detecting a fault in an actuator accord- 
ing to claim 25, wherein said control apparatus is 
constituted by a programmable logic controller; 

the state of said input signal corresponds to 
the state of a contact of the programmable logic con- 
50 trailer; and 

the state of said output signal corresponds to 
the state of a relay of the programmable logic con- 
troller. 

55 27. A method of detecting a fault in an actuator accord- 
ing to claims 26, wherein the programmable logic 
controller performs all of said determinations. 
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28. A method of detecting a fault in an actuator and a 
detector through a control apparatus, which controls 
a controlled system including one or two or more 
detectors and one or two or more actuators, having 
input-signal memory means for storing the state of 
an input signal from said detector, auxiliary input- 
signal memory means for storing the state of an 
input signal provided by auxiliary-signal generating 
means, arithmetic-logic means for generating an 
output signal to be applied to said actuator in accord- 
ance with predetermined logic in conformity with the 
states of the input signals stored in said input-signal 
memory means and auxiliary input-signal memory 
means, and output-signal memory means for storing 
the state of the output signal generated by said arith- 
metic-logic means; 

wherein when there is an actuator not oper- 
ating normally in said controlled system, the actua- 
tor is detected through the control apparatus and a 
detector that is possibly faulty in the controlled sys- 
tem and a cause of failure of the actuator is detected 
through said control apparatus, the method of 
detecting the fault comprising the steps of: 

determining whether a prescribed condition 
for generation of an output signal to be applied to 
the actuator has been established; 

determining whether the state of said output 
signal is normal; 

in a case where it has been determined that 
the state of the output signal has not become normal 
even upon elapse of a prescribed time from estab- 
lishment of said prescribed condition, determining 
that the actuator to which this output signal is to be 
applied is faulty; 

extracting an input signal that has influenced 
a logical operation, performed by said arithmetic- 
logic means, which gave rise to the abnormal output 
signal for which said fault has been determined; 

determining whether said extracted input sig- 
nal is the signal that has been stored in said input- 
signal memory means; and 

if result of said determination is that the 
extracted input signal is the signal that has been 
stored in the input-signal memory means, storing an 
identification code of this input signal. 

29. A method of detecting a fault in an actuator and a 
detector according to claim 28, further comprising a 
step of displaying the identification code of the input 
signal that has been stored in said storage device. 

30. A method of detecting a fault in an actuator and a 
detector according to claims 28 and 29, wherein in 
a case where the result of said determination is that 
the extracted input signal is the signal that has been 
stored in the auxiliary input-signal memory means 
and that it is controlled by the state of the output sig- 
nal of the control apparatus, extraction of the input 
signal that has influenced the logical operation, per- 
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formed by said arithmetic-logic means, which gave 
rise to the abnormal output signal that controls the 
state of said extracted input signal is repeated. 

5 31. A method of detecting a fault in an actuator and a 
detector according to claim 30, further comprising 
steps of: 

calculating degree of priority of each input 
signal in a case where a plurality of input signals 

10 have been extracted; 

ending extraction of said input signal when 
the number of input signals stored in said storage 
device becomes larger than a predetermined pre- 
scribed number or when there are no longer any 

15 input signals to be extracted; and 

in a case where extraction has not ended, 
performing the determination, as to whether the 
extracted input signal has been stored in said input- 
signal memory means, in regular order starting from 

20 the input signal for which the degree of priority is cal- 
culated to be high when a plurality of input signals 
have been extracted, and performing the determina- 
tion, as to whether the extracted input signal has 
been stored in said input-signal memory means, 

25 when one input signal has been extracted. 

32. A method of detecting a fault in an actuator and a 
detector according to claim 31 , further comprising a 
step of calculating said degree of priority by obtain- 
so ing features of each extracted input signal and exe- 
cuting fuzzy reasoning based upon these features. 

33. A method of detecting a fault in an actuator and a 
detector according to any one of claims 28 through 

35 32, wherein said control apparatus is constituted by 
a programmable logic controller; 

the state of said input signal corresponds to 
the state of a contact of the programmable logic con- 
troller; and 

40 the state of said output signal corresponds to 

the state of a relay of the programmable logic con- 
troller. 

34. A method of detecting a fault in an actuator and a 
45 detector according to any claim 33, wherein the 

determination as to whether the prescribed condi- 
tion for generation of an output signal to be applied 
to the actuator has been established, the determi- 
nation as to whether the state of said output signal 

so is normal and the determination that the actuator to 
which the output signal is to be applied is faulty in a 
case where the state of the output signal has not 
become normal even upon elapse of a prescribed 
time from establishment of said prescribed condi- 

55 tion, are made by the programmable logic controller. 

35. A method of detecting a fault in an input signal; 
wherein a control apparatus, which controls a con- 
trolled system including one or two or more detec- 
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tors and one or two or more actuators, has input- 
signal memory means for storing the state of an 
input signal from said detector, auxiliary input-signal 
memory means for storing the state of an input sig- 
nal provided by auxiliary-signal generating means, 5 
arithmetic-logic means for generating an output sig- 
nal to be applied to said actuator in accordance with 
predetermined logic in conformity with the states of 
the input signals stored in said input-signal memory 
means and auxiliary input-signal memory means, w 
and output-signal memory means for storing the 
state of the output signal generated by said arithme- 
tic-logic means; and 

wherein when there is an actuator not oper- 
ating normally in said controlled system, an input 75 
signal that is possibly abnormal is detected, the 
method of detecting the fault comprising the steps 
of: 

designating an identification code of an 
abnormal output signal corresponding to the actua- 20 
tor not operating normally; 

extracting an input signal that has influenced 
a logical operation, performed by said arithmetic- 
logic means, which gave rise to said designated 
abnormal output; and 2 s 

storing the identification code of said 
extracted input signal in a storage device. 

36. A method of detecting a fault in an input signal 
according to claim 35, further comprising a step of 30 
displaying the identification code of the input signal 
that has been stored in said storage device. 
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